[root@retail1 ~]# hadoop fs -ls -l /user/hive/warehouse -ls: Illegal option -l Usage: hadoop fs [generic options] -ls [-C] [-d] [-h] [-q] [-R] [-t] [-S] [-r] [-u] [ ...] [root@retail1 ~]# hadoop fs -ls /user/hive/warehouse Found 7 items drwxrwxrwt - hive hive 0 2018-11-27 16:28 /user/hive/warehouse/20181120_bak_dim_ibi.db drwxrwxrwt - hive hive 0 2020-10-19 19:05 /user/hive/warehouse/aipdc.db drwxrwxrwt - sf hive 0 2020-10-26 17:22 /user/hive/warehouse/customers drwxrwxrwt - sf hive 0 2020-10-26 17:22 /user/hive/warehouse/sample_07 drwxrwxrwt - sf hive 0 2020-10-26 17:22 /user/hive/warehouse/sample_08 drwxrwxrwt - hive hive 0 2020-10-23 17:48 /user/hive/warehouse/tmp.db drwxrwxrwt - sf hive 0 2020-10-26 17:22 /user/hive/warehouse/web_logs [root@retail1 ~]# hadoop fs -ls /user/hive/warehouse/customers Found 1 items -rwxrwxrwt 3 sf sf 15812 2020-10-26 17:22 /user/hive/warehouse/customers/customers [root@retail1 ~]# hadoop fs -ls /user/hive/warehouse/customers/customers -rwxrwxrwt 3 sf sf 15812 2020-10-26 17:22 /user/hive/warehouse/customers/customers [root@retail1 ~]# vim /etc/passwd [root@retail1 ~]# pssh -help bash: pssh: command not found... Similar command is: 'ssh' [root@retail1 ~]# cd /cdhdata/ [root@retail1 cdhdata]# ls aipdc airflow bak dfs flink impala oozie parcels software yarn [root@retail1 cdhdata]# cd aipdc/ [root@retail1 aipdc]# ls aip-rt-speaker-jar-with-dependencies.jar conf flink logs speaker.conf tmp [root@retail1 aipdc]# cd ../bak [root@retail1 bak]# ls bak [root@retail1 bak]# [root@retail1 bak]# ls bak [root@retail1 bak]# vim list_krb_clients [root@retail1 bak]# yum search pssh Loaded plugins: fastestmirror, langpacks Repodata is over 2 weeks old. Install yum-cron? Or run: yum makecache fast Determining fastest mirrors

• base: mirrors.aliyun.com
• epel: ftp.iij.ad.jp
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com ==================================================================================== N/S matched: pssh =========================================================== mpssh.x86_64 : Parallel ssh tool pssh.noarch : Parallel SSH tools

Name and summary matches only, use "search all" for everything. [root@retail1 bak]# yum install pssh -y Loaded plugins: fastestmirror, langpacks Repodata is over 2 weeks old. Install yum-cron? Or run: yum makecache fast base centos7.3_x64 cloudera-manager epel/x86_64/metalink epel extras mysql-connectors-community mysql-tools-community mysql57-community updates zeroc-ice3.7 zeroc-ice3.7-src (1/8): extras/7/x86_64/primary_db epel/x86_64/primary_db FAILED http://mirrors.bfsu.edu.cn/epel/7/x86_64/repodata/65f8f254d35ed38a932744c802b49080696a0641cfc424096a70c62cf98ef23d-primary.sqlite.bz2: [Errno 14] HTTP Error 404 - Trying other mirror. To address this issue please refer to the below knowledge base article

https://access.redhat.com/articles/1320623

If above article doesn't help to resolve this issue please create a bug on https://bugs.centos.org/

epel/x86_64/updateinfo FAILED https://mirrors.tuna.tsinghua.edu.cn/epel/7/x86_64/repodata/4d5043b85cccabfe2f397fb20226f1980ec293aa028800c34ba1dc44bd2ddf92-updateinfo.xml.bz2: [Errno 14] HTTPS Trying other mirror. (2/8): updates/7/x86_64/primary_db (3/8): epel/x86_64/group_gz (4/8): mysql-connectors-community/x86_64/primary_db (5/8): epel/x86_64/updateinfo (6/8): mysql57-community/x86_64/primary_db (7/8): mysql-tools-community/x86_64/primary_db epel/x86_64/primary_db FAILED http://hk.mirrors.thegigabit.com/epel/7/x86_64/repodata/65f8f254d35ed38a932744c802b49080696a0641cfc424096a70c62cf98ef23d-primary.sqlite.bz2: [Errno 14] HTTP Error Trying other mirror. (8/8): epel/x86_64/primary_db Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.bfsu.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com Resolving Dependencies --> Running transaction check ---> Package pssh.noarch 0:2.3.1-5.el7 will be installed --> Finished Dependency Resolution

Dependencies Resolved

Installing: pssh noarch 2.3.1-5.el7 epel

Install 1 Package

Total download size: 49 k Installed size: 115 k Downloading packages: pssh-2.3.1-5.el7.noarch.rpm Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : pssh-2.3.1-5.el7.noarch Verifying : pssh-2.3.1-5.el7.noarch

Installed: pssh.noarch 0:2.3.1-5.el7

Complete! [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# pssh --help Usage: pssh [OPTIONS] command [...]

Options: --version show program's version number and exit --help show this help message and exit -h HOST_FILE, --hosts=HOST_FILE hosts file (each line "[user@]host[:port]") -H HOST_STRING, --host=HOST_STRING additional host entries ("[user@]host[:port]") -l USER, --user=USER username (OPTIONAL) -p PAR, --par=PAR max number of parallel threads (OPTIONAL) -o OUTDIR, --outdir=OUTDIR output directory for stdout files (OPTIONAL) -e ERRDIR, --errdir=ERRDIR output directory for stderr files (OPTIONAL) -t TIMEOUT, --timeout=TIMEOUT timeout (secs) (0 = no timeout) per host (OPTIONAL) -O OPTION, --option=OPTION SSH option (OPTIONAL) -v, --verbose turn on warning and diagnostic messages (OPTIONAL) -A, --askpass Ask for a password (OPTIONAL) -x ARGS, --extra-args=ARGS Extra command-line arguments, with processing for spaces, quotes, and backslashes -X ARG, --extra-arg=ARG Extra command-line argument -i, --inline inline aggregated output and error for each server --inline-stdout inline standard output for each server -I, --send-input read from standard input and send as input to ssh -P, --print print output as we get it

Example: pssh -h hosts.txt -l irb2 -o /tmp/foo uptime [root@retail1 bak]# ls bak list_krb_clients [root@retail1 bak]# [root@retail1 bak]# ls bak list_krb_clients [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# sudo yum install krb5-server openldap-clients -y Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.bfsu.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com Resolving Dependencies --> Running transaction check ---> Package krb5-server.x86_64 0:1.15.1-46.el7 will be installed --> Processing Dependency: libkadm5(x86-64) = 1.15.1-46.el7 for package: krb5-server-1.15.1-46.el7.x86_64 --> Processing Dependency: krb5-libs(x86-64) = 1.15.1-46.el7 for package: krb5-server-1.15.1-46.el7.x86_64 --> Processing Dependency: libkadm5srv_mit.so.11(kadm5srv_mit_11_MIT)(64bit) for package: krb5-server-1.15.1-46.el7.x86_64 --> Processing Dependency: libkadm5clnt_mit.so.11(kadm5clnt_mit_11_MIT)(64bit) for package: krb5-server-1.15.1-46.el7.x86_64 --> Processing Dependency: libkadm5srv_mit.so.11()(64bit) for package: krb5-server-1.15.1-46.el7.x86_64 --> Processing Dependency: libkadm5clnt_mit.so.11()(64bit) for package: krb5-server-1.15.1-46.el7.x86_64 ---> Package openldap-clients.x86_64 0:2.4.44-21.el7_6 will be installed --> Processing Dependency: openldap(x86-64) = 2.4.44-21.el7_6 for package: openldap-clients-2.4.44-21.el7_6.x86_64 --> Running transaction check ---> Package krb5-libs.x86_64 0:1.14.1-27.el7_3 will be updated --> Processing Dependency: krb5-libs(x86-64) = 1.14.1-27.el7_3 for package: krb5-devel-1.14.1-27.el7_3.x86_64 ---> Package krb5-libs.x86_64 0:1.15.1-46.el7 will be an update ---> Package libkadm5.x86_64 0:1.14.1-27.el7_3 will be updated ---> Package libkadm5.x86_64 0:1.15.1-46.el7 will be an update ---> Package openldap.x86_64 0:2.4.40-13.el7 will be updated ---> Package openldap.x86_64 0:2.4.44-21.el7_6 will be an update --> Running transaction check ---> Package krb5-devel.x86_64 0:1.14.1-27.el7_3 will be updated ---> Package krb5-devel.x86_64 0:1.15.1-46.el7 will be an update --> Finished Dependency Resolution

Dependencies Resolved

Installing: krb5-server x86_64 1.15.1-46.el7 base openldap-clients x86_64 2.4.44-21.el7_6 base Updating for dependencies: krb5-devel x86_64 1.15.1-46.el7 base krb5-libs x86_64 1.15.1-46.el7 base libkadm5 x86_64 1.15.1-46.el7 base openldap x86_64 2.4.44-21.el7_6 base

Install 2 Packages Upgrade ( 4 Dependent packages)

Total 12 MB/ Running transaction check Running transaction test Transaction test succeeded Running transaction Updating : krb5-libs-1.15.1-46.el7.x86_64 Updating : libkadm5-1.15.1-46.el7.x86_64 Updating : openldap-2.4.44-21.el7_6.x86_64 Installing : openldap-clients-2.4.44-21.el7_6.x86_64 Updating : krb5-devel-1.15.1-46.el7.x86_64 Installing : krb5-server-1.15.1-46.el7.x86_64 Cleanup : krb5-devel-1.14.1-27.el7_3.x86_64 Cleanup : libkadm5-1.14.1-27.el7_3.x86_64 Cleanup : krb5-libs-1.14.1-27.el7_3.x86_64 Cleanup : openldap-2.4.40-13.el7.x86_64 Verifying : krb5-devel-1.15.1-46.el7.x86_64 Verifying : krb5-server-1.15.1-46.el7.x86_64 Verifying : libkadm5-1.15.1-46.el7.x86_64 Verifying : krb5-libs-1.15.1-46.el7.x86_64 Verifying : openldap-2.4.44-21.el7_6.x86_64 Verifying : openldap-clients-2.4.44-21.el7_6.x86_64 Verifying : krb5-devel-1.14.1-27.el7_3.x86_64 Verifying : krb5-libs-1.14.1-27.el7_3.x86_64 Verifying : openldap-2.4.40-13.el7.x86_64 Verifying : libkadm5-1.14.1-27.el7_3.x86_64

Installed: krb5-server.x86_64 0:1.15.1-46.el7 openldap-clients.x86_64 0:2.4.44-21.el7_6

Dependency Updated: krb5-devel.x86_64 0:1.15.1-46.el7 krb5-libs.x86_64 0:1.15.1-46.el7 libkadm5.x86_64 0:1.15.1-46.el7 openldap.x86_64 0:2.4.

Updating: krb5-devel x86_64 1.15.1-46.el7 base 272 k krb5-workstation x86_64 1.15.1-46.el7 base 820 k Updating for dependencies: krb5-libs x86_64 1.15.1-46.el7 base 809 k libkadm5 x86_64 1.15.1-46.el7 base 179 k

Upgrade 2 Packages (+2 Dependent packages)

retail3: Total download size: 2.0 M Downloading packages: retail3: No Presto metadata available for base retail3: -------------------------------------------------------------------------------- retail3: Total 1.6 MB/s | 2.0 MB 00:01 retail3: Running transaction check retail3: Running transaction test retail3: Transaction test succeeded retail3: Running transaction retail3: Updating : krb5-libs-1.15.1-46.el7.x86_64 1/8 retail3: Updating : libkadm5-1.15.1-46.el7.x86_64 2/8 retail3: Updating : krb5-devel-1.15.1-46.el7.x86_64 3/8 retail3: Updating : krb5-workstation-1.15.1-46.el7.x86_64 4/8 retail3: Cleanup : krb5-workstation-1.14.1-27.el7_3.x86_64 5/8 retail3: Cleanup : krb5-devel-1.14.1-27.el7_3.x86_64 6/8 retail3: Cleanup : libkadm5-1.14.1-27.el7_3.x86_64 7/8 retail3: Cleanup : krb5-libs-1.14.1-27.el7_3.x86_64 8/8 retail3: Verifying : krb5-devel-1.15.1-46.el7.x86_64 1/8 retail3: Verifying : krb5-workstation-1.15.1-46.el7.x86_64 2/8 retail3: Verifying : libkadm5-1.15.1-46.el7.x86_64 3/8 retail3: Verifying : krb5-libs-1.15.1-46.el7.x86_64 4/8 retail3: Verifying : krb5-devel-1.14.1-27.el7_3.x86_64 5/8 retail3: Verifying : libkadm5-1.14.1-27.el7_3.x86_64 6/8 retail3: Verifying : krb5-libs-1.14.1-27.el7_3.x86_64 7/8 retail3: Verifying : krb5-workstation-1.14.1-27.el7_3.x86_64 8/8 retail3:

Updated: krb5-devel.x86_64 0:1.15.1-46.el7 krb5-workstation.x86_64 0:1.15.1-46.el7

Dependency Updated: krb5-libs.x86_64 0:1.15.1-46.el7 libkadm5.x86_64 0:1.15.1-46.el7

retail3: Complete! [2] 17:44:34 [SUCCESS] retail3 [3] 17:45:20 [FAILURE] retail2 Timed out, Killed by signal 9 You have new mail in /var/spool/mail/root [root@retail1 bak]# pssh -h list_krb_clients -P -l root "yum install krb5-devel krb5-workstation -y" retail3: Loaded plugins: fastestmirror, langpacks retail2: Loaded plugins: fastestmirror, langpacks retail4: Loaded plugins: fastestmirror, langpacks retail3: Loading mirror speeds from cached hostfile retail2: Loading mirror speeds from cached hostfile retail3: * base: mirrors.aliyun.com retail2: * base: mirrors.aliyun.com retail3: * extras: mirrors.aliyun.com retail2: * extras: mirrors.aliyun.com retail3: * updates: mirrors.aliyun.com retail2: * updates: mirrors.aliyun.com retail4: Loading mirror speeds from cached hostfile retail4: * base: mirrors.aliyun.com retail4: * extras: mirrors.aliyun.com retail4: * updates: mirrors.aliyun.com retail3: Package krb5-devel-1.15.1-46.el7.x86_64 already installed and latest version retail2: Package krb5-devel-1.15.1-46.el7.x86_64 already installed and latest version retail4: Package krb5-devel-1.15.1-46.el7.x86_64 already installed and latest version retail3: Package krb5-workstation-1.15.1-46.el7.x86_64 already installed and latest version retail3: Nothing to do [1] 17:48:57 [SUCCESS] retail3 retail2: Package krb5-workstation-1.15.1-46.el7.x86_64 already installed and latest version retail2: Nothing to do retail4: Package krb5-workstation-1.15.1-46.el7.x86_64 already installed and latest version retail4: Nothing to do [2] 17:48:57 [SUCCESS] retail2 [3] 17:48:57 [SUCCESS] retail4 [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# [root@retail1 bak]# vim /etc/krb5.conf [root@retail1 bak]# [root@retail1 bak]# pssh -h list_krb_clients "cp /etc/krb5.conf /etc/krb5.conf.bak" [1] 17:51:25 [SUCCESS] retail3 [2] 17:51:25 [SUCCESS] retail2 [3] 17:51:25 [SUCCESS] retail4 [root@retail1 bak]# cp /etc/krb5.conf /etc/krb5.conf.bak [root@retail1 bak]# vim /etc/krb5.conf [root@retail1 bak]# vim /var/kerberos/krb5kdc//kdc.conf [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# pssh -h /cdhdata/bak/list_krb_clients krb5.conf /tmp [1] 10:20:38 [FAILURE] retail3 Exited with error code 127 [2] 10:20:38 [FAILURE] retail2 Exited with error code 127 [3] 10:20:38 [FAILURE] retail4 Exited with error code 127 [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# pssh -h /cdhdata/bak/list_krb_clients "who" [1] 10:21:47 [SUCCESS] retail2 [2] 10:21:47 [SUCCESS] retail3 [3] 10:21:47 [SUCCESS] retail4 [root@retail1 etc]# pssh -h /cdhdata/bak/list_krb_clients "whoami" [1] 10:21:55 [SUCCESS] retail2 [2] 10:21:55 [SUCCESS] retail3 [3] 10:21:55 [SUCCESS] retail4 [root@retail1 etc]# pssh --help Usage: pssh [OPTIONS] command [...]

Options: --version show program's version number and exit --help show this help message and exit -h HOST_FILE, --hosts=HOST_FILE hosts file (each line "[user@]host[:port]") -H HOST_STRING, --host=HOST_STRING additional host entries ("[user@]host[:port]") -l USER, --user=USER username (OPTIONAL) -p PAR, --par=PAR max number of parallel threads (OPTIONAL) -o OUTDIR, --outdir=OUTDIR output directory for stdout files (OPTIONAL) -e ERRDIR, --errdir=ERRDIR output directory for stderr files (OPTIONAL) -t TIMEOUT, --timeout=TIMEOUT timeout (secs) (0 = no timeout) per host (OPTIONAL) -O OPTION, --option=OPTION SSH option (OPTIONAL) -v, --verbose turn on warning and diagnostic messages (OPTIONAL) -A, --askpass Ask for a password (OPTIONAL) -x ARGS, --extra-args=ARGS Extra command-line arguments, with processing for spaces, quotes, and backslashes -X ARG, --extra-arg=ARG Extra command-line argument -i, --inline inline aggregated output and error for each server --inline-stdout inline standard output for each server -I, --send-input read from standard input and send as input to ssh -P, --print print output as we get it

Example: pssh -h hosts.txt -l irb2 -o /tmp/foo uptime [root@retail1 etc]# uptime 10:23:07 up 114 days, 23:33, 6 users, load average: 0.37, 0.49, 0.49 [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# pscp -h /cdhdata/bak/list_krb_clients /etc/krb5.conf /tmp bash: pscp: command not found... Similar command is: 'scp' [root@retail1 etc]# yum install pscp Loaded plugins: fastestmirror, langpacks base centos7.3_x64 cloudera-manager epel/x86_64/metalink epel extras mysql-connectors-community mysql-tools-community mysql57-community updates zeroc-ice3.7 zeroc-ice3.7-src (1/2): epel/x86_64/updateinfo (2/2): epel/x86_64/primary_db Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.bfsu.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com No package pscp available. Error: Nothing to do [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# yum search pscp Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile
• base: mirrors.aliyun.com
• epel: mirrors.bfsu.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com ====================================================================================== Matched: pscp ============================================================= pssh.noarch : Parallel SSH tools [root@retail1 etc]# ps ps ps2epsi ps2pdf12 ps2pdf14 ps2ps pscp.pssh psfaddtable psfstriptable psktool pssh pstree ps2ascii ps2pdf ps2pdf13 ps2pdfwr ps2ps2 psed psfgettable psfxtable pslurp pstack pstree.x11 [root@retail1 etc]# ps ps ps2epsi ps2pdf12 ps2pdf14 ps2ps pscp.pssh psfaddtable psfstriptable psktool pssh pstree ps2ascii ps2pdf ps2pdf13 ps2pdfwr ps2ps2 psed psfgettable psfxtable pslurp pstack pstree.x11 [root@retail1 etc]# pscp.pssh --help Usage: pscp.pssh [OPTIONS] local remote

Options: --version show program's version number and exit --help show this help message and exit -h HOST_FILE, --hosts=HOST_FILE hosts file (each line "[user@]host[:port]") -H HOST_STRING, --host=HOST_STRING additional host entries ("[user@]host[:port]") -l USER, --user=USER username (OPTIONAL) -p PAR, --par=PAR max number of parallel threads (OPTIONAL) -o OUTDIR, --outdir=OUTDIR output directory for stdout files (OPTIONAL) -e ERRDIR, --errdir=ERRDIR output directory for stderr files (OPTIONAL) -t TIMEOUT, --timeout=TIMEOUT timeout (secs) (0 = no timeout) per host (OPTIONAL) -O OPTION, --option=OPTION SSH option (OPTIONAL) -v, --verbose turn on warning and diagnostic messages (OPTIONAL) -A, --askpass Ask for a password (OPTIONAL) -x ARGS, --extra-args=ARGS Extra command-line arguments, with processing for spaces, quotes, and backslashes -X ARG, --extra-arg=ARG Extra command-line argument -r, --recursive recusively copy directories (OPTIONAL)

Example: pscp -h hosts.txt -l irb2 foo.txt /home/irb2/foo.txt [root@retail1 etc]# pscp.pssh Usage: pscp.pssh [OPTIONS] local remote

pscp.pssh: error: Paths not specified. [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# pscp.pssh -h /cdhdata/bak/list_krb_clients /etc/krb5.conf /tmp [1] 10:25:28 [SUCCESS] retail4 [2] 10:25:28 [SUCCESS] retail3 [3] 10:25:28 [SUCCESS] retail2 [root@retail1 etc]# pscp.pssh -h /cdhdata/bak/list_krb_clients /etc/krb5.conf /etc [1] 10:30:21 [SUCCESS] retail3 [2] 10:30:21 [SUCCESS] retail2 [3] 10:30:21 [SUCCESS] retail4 [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# cd /var/kerberos/ [root@retail1 kerberos]# ls krb5 krb5kdc [root@retail1 kerberos]# cd krb5kdc/ [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf [root@retail1 krb5kdc]# vim kdc.conf [root@retail1 krb5kdc]# cp kdc.conf kdc.conf.bak [root@retail1 krb5kdc]# vim kdc.conf [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak [root@retail1 krb5kdc]# vim kadm5.acl [root@retail1 krb5kdc]# cd /tmp [root@retail1 tmp]# wget http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip --2020-10-29 10:36:21-- http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip Resolving download.oracle.com (download.oracle.com)... 96.16.172.34 Connecting to download.oracle.com (download.oracle.com)|96.16.172.34|:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://edelivery.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip [following] --2020-10-29 10:36:21-- https://edelivery.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip Resolving edelivery.oracle.com (edelivery.oracle.com)... 23.34.98.233, 2600:140e:6:9bf::366, 2600:140e:6:9be::366 Connecting to edelivery.oracle.com (edelivery.oracle.com)|23.34.98.233|:443... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://download.oracle.com/errors/download-fail-1505220.html [following] --2020-10-29 10:36:22-- http://download.oracle.com/errors/download-fail-1505220.html Connecting to download.oracle.com (download.oracle.com)|96.16.172.34|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://download.oracle.com/errors/download-fail-1505220.html [following] --2020-10-29 10:36:24-- https://download.oracle.com/errors/download-fail-1505220.html Connecting to download.oracle.com (download.oracle.com)|96.16.172.34|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 5307 (5.2K) [text/html] Saving to: ‘jce_policy-8.zip’

100%[========================================================================================================================>] 5,307 --.-K/s in 0s

2020-10-29 10:36:26 (584 MB/s) - ‘jce_policy-8.zip’ saved [5307/5307]

[root@retail1 tmp]# ls -lhtr total 256K -rw-r--r-- 1 root root 5.2K Mar 21 2012 jce_policy-8.zip drwx------ 3 root root 4.0K Jul 6 10:46 systemd-private-d0538a08defa4ec7a8281dbd3d451416-rtkit-daemon.service-QXEcEi drwx------ 3 root root 4.0K Jul 6 10:46 systemd-private-d0538a08defa4ec7a8281dbd3d451416-cups.service-4LcEIz drwx------ 3 root root 4.0K Jul 6 10:46 systemd-private-d0538a08defa4ec7a8281dbd3d451416-colord.service-Aq3PB2 drwxr-xr-x 2 root root 4.0K Oct 23 12:39 spark2 -rw-r----- 1 root root 71K Oct 23 15:22 jffi678528997794985565.tmp drwxr-x--- 4 root root 4.0K Oct 23 15:22 Jetty_0_0_0_0_7180_webapp____.3x0fy6 drwxr-xr-x 2 hdfs hdfs 4.0K Oct 23 15:29 hsperfdata_hdfs drwxr-xr-x 4 hdfs hdfs 4.0K Oct 23 15:29 Jetty_localhost_35849_datanode____.5al4u drwxr-xr-x 5 yarn yarn 4.0K Oct 23 17:13 Jetty_retail1_8042_node____4yhaw6 -rw------- 1 root root 8 Oct 26 13:40 2029240f6d1128be89ddc32729463129 drwxr-xr-x 2 solr solr 4.0K Oct 26 15:48 hsperfdata_solr drwxr-xr-x 2 yarn yarn 4.0K Oct 27 09:47 hsperfdata_yarn drwxrwxr-x 2 hive hive 4.0K Oct 27 18:57 hive drwxr-xr-x 2 hive hive 4.0K Oct 28 17:11 hsperfdata_hive drwxr-xr-x 5 hive hive 4.0K Oct 28 17:11 hadoop-unjar2290118920499605869 -rw-r--r-- 1 hive hive 102K Oct 28 17:11 libnetty-transport-native-epoll6823505566244614422.so drwxr-xr-x 2 impala impala 4.0K Oct 28 17:11 hsperfdata_impala drwxr-xr-x 2 oozie oozie 4.0K Oct 28 17:11 hsperfdata_oozie -rw------- 1 root root 3.3K Oct 28 17:11 cmflistener-stdout---agent-33076-1594121316-E8vNSf.log drwxr-xr-x 2 root root 4.0K Oct 29 10:36 hsperfdata_root [root@retail1 tmp]# unzip jce_policy-8.zip Archive: jce_policy-8.zip End-of-central-directory signature not found. Either this file is not a zipfile, or it constitutes one disk of a multi-part archive. In the latter case the central directory and zipfile comment will be found on the last disk(s) of this archive. unzip: cannot find zipfile directory in one of jce_policy-8.zip or jce_policy-8.zip.zip, and cannot find jce_policy-8.zip.ZIP, period. [root@retail1 tmp]# [root@retail1 tmp]# [root@retail1 tmp]# wget https://enos.itcollege.ee/~jpoial/allalaadimised/jdk8/jce_policy-8.zip --2020-10-29 10:37:46-- https://enos.itcollege.ee/~jpoial/allalaadimised/jdk8/jce_policy-8.zip Resolving enos.itcollege.ee (enos.itcollege.ee)... 193.40.231.203, 2001:bb8:4006:fff:193:40:231:203 Connecting to enos.itcollege.ee (enos.itcollege.ee)|193.40.231.203|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 8409 (8.2K) [application/zip] Saving to: ‘jce_policy-8.zip.1’

100%[========================================================================================================================>] 8,409 --.-K/s in 0.001s

2020-10-29 10:37:48 (12.3 MB/s) - ‘jce_policy-8.zip.1’ saved [8409/8409]

[root@retail1 tmp]# ls 2029240f6d1128be89ddc32729463129 jce_policy-8.zip cmflistener-stdout---agent-33076-1594121316-E8vNSf.log jce_policy-8.zip.1 hadoop-unjar2290118920499605869 Jetty_0_0_0_0_7180_webapp____.3x0fy6 hive Jetty_localhost_35849_datanode____.5al4u hsperfdata_hdfs Jetty_retail1_8042_node____4yhaw6 hsperfdata_hive jffi678528997794985565.tmp hsperfdata_impala libnetty-transport-native-epoll6823505566244614422.so hsperfdata_oozie spark2 hsperfdata_root systemd-private-d0538a08defa4ec7a8281dbd3d451416-colord.service-Aq3PB2 hsperfdata_solr systemd-private-d0538a08defa4ec7a8281dbd3d451416-cups.service-4LcEIz hsperfdata_yarn systemd-private-d0538a08defa4ec7a8281dbd3d451416-rtkit-daemon.service-QXEcEi [root@retail1 tmp]# rm jce_policy-8.zip* rm: remove regular file ‘jce_policy-8.zip’? rm: remove regular file ‘jce_policy-8.zip.1’? [root@retail1 tmp]# rm jce_policy-8.zip* rm: remove regular file ‘jce_policy-8.zip’? y rm: remove regular file ‘jce_policy-8.zip.1’? y [root@retail1 tmp]# [root@retail1 tmp]# [root@retail1 tmp]# wget https://enos.itcollege.ee/~jpoial/allalaadimised/jdk8/jce_policy-8.zip --2020-10-29 10:38:00-- https://enos.itcollege.ee/~jpoial/allalaadimised/jdk8/jce_policy-8.zip Resolving enos.itcollege.ee (enos.itcollege.ee)... 193.40.231.203, 2001:bb8:4006:fff:193:40:231:203 Connecting to enos.itcollege.ee (enos.itcollege.ee)|193.40.231.203|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 8409 (8.2K) [application/zip] Saving to: ‘jce_policy-8.zip’

100%[========================================================================================================================>] 8,409 7.79KB/s in 1.1s

2020-10-29 10:38:02 (7.79 KB/s) - ‘jce_policy-8.zip’ saved [8409/8409]

[root@retail1 tmp]# [root@retail1 tmp]# [root@retail1 tmp]# [root@retail1 tmp]# [root@retail1 tmp]# unzip jce_policy-8.zip Archive: jce_policy-8.zip creating: UnlimitedJCEPolicyJDK8/ inflating: UnlimitedJCEPolicyJDK8/local_policy.jar inflating: UnlimitedJCEPolicyJDK8/README.txt inflating: UnlimitedJCEPolicyJDK8/US_export_policy.jar [root@retail1 tmp]# cd UnlimitedJCEPolicyJDK8/ [root@retail1 UnlimitedJCEPolicyJDK8]# ls local_policy.jar README.txt US_export_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# cd .. [root@retail1 tmp]# ls 2029240f6d1128be89ddc32729463129 jce_policy-8.zip cmflistener-stdout---agent-33076-1594121316-E8vNSf.log Jetty_0_0_0_0_7180_webapp____.3x0fy6 hadoop-unjar2290118920499605869 Jetty_localhost_35849_datanode____.5al4u hive Jetty_retail1_8042_node____4yhaw6 hsperfdata_hdfs jffi678528997794985565.tmp hsperfdata_hive libnetty-transport-native-epoll6823505566244614422.so hsperfdata_impala spark2 hsperfdata_oozie systemd-private-d0538a08defa4ec7a8281dbd3d451416-colord.service-Aq3PB2 hsperfdata_root systemd-private-d0538a08defa4ec7a8281dbd3d451416-cups.service-4LcEIz hsperfdata_solr systemd-private-d0538a08defa4ec7a8281dbd3d451416-rtkit-daemon.service-QXEcEi hsperfdata_yarn UnlimitedJCEPolicyJDK8 [root@retail1 tmp]# echo $JAVA_HOME /usr/java/latest [root@retail1 tmp]# ls UnlimitedJCEPolicyJDK8/*.jar UnlimitedJCEPolicyJDK8/local_policy.jar UnlimitedJCEPolicyJDK8/US_export_policy.jar [root@retail1 tmp]# cd UnlimitedJCEPolicyJDK8/ [root@retail1 UnlimitedJCEPolicyJDK8]# ls local_policy.jar README.txt US_export_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# ls local_policy.jar README.txt US_export_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# ls *.jar local_policy.jar US_export_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# ls $JAVA_HOME/jre/lib/security blacklist blacklisted.certs cacerts java.policy java.security javaws.policy local_policy.jar trusted.libraries US_export_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# diff $JAVA_HOME/jre/lib/security/local_policy.jar local_policy.jar diff: $JAVA_HOME/jre/lib/security/local_policy.jar: No such file or directory [root@retail1 UnlimitedJCEPolicyJDK8]# diff $JAVA_HOME/jre/lib/security/local_policy.jar local_policy.jar Binary files /usr/java/latest/jre/lib/security/local_policy.jar and local_policy.jar differ [root@retail1 UnlimitedJCEPolicyJDK8]# ls -l $JAVA_HOME/jre/lib/security/local_policy.jar -rw-r--r--. 1 root root 3405 Dec 13 2016 /usr/java/latest/jre/lib/security/local_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# ls -l local_policy.jar -rw-rw-r-- 1 root root 3035 Dec 21 2013 local_policy.jar [root@retail1 UnlimitedJCEPolicyJDK8]# cp -rf $JAVA_HOME/jre/lib/security $JAVA_HOME/jre/lib/security.bak [root@retail1 UnlimitedJCEPolicyJDK8]# ls $JAVA_HOME/jre/lib | grep security security security.bak [root@retail1 UnlimitedJCEPolicyJDK8]# pssh -h /cdhdata/bak/ bak/ list_krb_clients [root@retail1 UnlimitedJCEPolicyJDK8]# pssh -h /cdhdata/bak/list_krb_clients -l root "cp -rf $JAVA_HOME/jre/lib/security $JAVA_HOME/jre/lib/security.bak" [1] 10:43:22 [SUCCESS] retail3 [2] 10:43:22 [SUCCESS] retail2 [3] 10:43:22 [SUCCESS] retail4 [root@retail1 UnlimitedJCEPolicyJDK8]# cp *.jar $JAVA_HOME/jre/lib/security/ cp: overwrite ‘/usr/java/latest/jre/lib/security/local_policy.jar’? y cp: overwrite ‘/usr/java/latest/jre/lib/security/US_export_policy.jar’? y [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# \cp *.jar $JAVA_HOME/jre/lib/security/ [root@retail1 UnlimitedJCEPolicyJDK8]# cp *.jar $JAVA_HOME/jre/lib/security/ cp: overwrite ‘/usr/java/latest/jre/lib/security/local_policy.jar’? ^C [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# [root@retail1 UnlimitedJCEPolicyJDK8]# pscp.pssh -h /cdhdata/bak/list_krb_clients .jar $JAVA_HOME/jre/lib/security/ [1] 10:45:40 [SUCCESS] retail4 [2] 10:45:40 [SUCCESS] retail2 [3] 10:45:40 [SUCCESS] retail3 [root@retail1 UnlimitedJCEPolicyJDK8]# cd /var/kerberos/ [root@retail1 kerberos]# ls krb5 krb5kdc [root@retail1 kerberos]# cd krb5kdc/ [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# kdb5_util --help Usage: kdb5_util [-x db_args] [-r realm] [-d dbname] [-k mkeytype] [-M mkeyname] [-kv mkeyVNO] [-sf stashfilename] [-m] cmd [cmd_options] create [-s] destroy [-f] stash [-f keyfile] dump [-old|-ov|-b6|-b7|-r13|-r18] [-verbose] [-mkey_convert] [-new_mkey_file mkey_file] [-rev] [-recurse] [filename [princs...]] load [-old|-ov|-b6|-b7|-r13|-r18] [-verbose] [-update] filename ark [-e etype_list] principal add_mkey [-e etype] [-s] use_mkey kvno [time] list_mkeys update_princ_encryption [-f] [-n] [-v] [princ-pattern] purge_mkeys [-f] [-n] [-v] tabdump [-H] [-c] [-e] [-n] [-o outfile] dumptype

where, [-x db_args]* - any number of database specific arguments. Look at each database documentation for supported arguments [root@retail1 krb5kdc]# kdb5_util -r DOMAIN.COM create -s Loading random data Initializing database '/var/kerberos/krb5kdc/principal' for realm 'DOMAIN.COM', master key name 'K/[email protected]' You will be prompted for the database Master Password. It is important that you NOT FORGET this password. Enter KDC database master key: Re-enter KDC database master key to verify: [root@retail1 krb5kdc]# Connection reset by 10.18.60.114 port 22

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $ ssh root@retail1 Last login: Thu Oct 29 10:09:06 2020 from 10.74.140.98 [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# systemctl start krb5kdc [root@retail1 ~]# systemctl status krb5kdc ● krb5kdc.service - Kerberos 5 KDC Loaded: loaded (/usr/lib/systemd/system/krb5kdc.service; disabled; vendor preset: disabled) Active: active (running) since Thu 2020-10-29 13:27:00 CST; 13s ago Process: 2660 ExecStart=/usr/sbin/krb5kdc -P /var/run/krb5kdc.pid $KRB5KDC_ARGS (code=exited, status=0/SUCCESS) Main PID: 2664 (krb5kdc) Memory: 756.0K CGroup: /system.slice/krb5kdc.service └─2664 /usr/sbin/krb5kdc -P /var/run/krb5kdc.pid

Oct 29 13:27:00 retail1 systemd[1]: Starting Kerberos 5 KDC... Oct 29 13:27:00 retail1 systemd[1]: Failed to read PID from file /var/run/krb5kdc.pid: Invalid argument Oct 29 13:27:00 retail1 systemd[1]: Started Kerberos 5 KDC. [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# systemctl status kadmin ● kadmin.service - Kerberos 5 Password-changing and Administration Loaded: loaded (/usr/lib/systemd/system/kadmin.service; disabled; vendor preset: disabled) Active: inactive (dead) [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# systemctl start kadmin [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# systemctl enable krb5kdc Created symlink from /etc/systemd/system/multi-user.target.wants/krb5kdc.service to /usr/lib/systemd/system/krb5kdc.service. [root@retail1 ~]# [root@retail1 ~]# systemctl enable kadmin Created symlink from /etc/systemd/system/multi-user.target.wants/kadmin.service to /usr/lib/systemd/system/kadmin.service. [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# systemctl status kadmin ● kadmin.service - Kerberos 5 Password-changing and Administration Loaded: loaded (/usr/lib/systemd/system/kadmin.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2020-10-29 13:27:29 CST; 43s ago Main PID: 2764 (kadmind) CGroup: /system.slice/kadmin.service └─2764 /usr/sbin/kadmind -P /var/run/kadmind.pid

Oct 29 13:27:29 retail1 systemd[1]: Starting Kerberos 5 Password-changing and Administration... Oct 29 13:27:29 retail1 systemd[1]: Started Kerberos 5 Password-changing and Administration. [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin kadmind kadmin.local [root@retail1 ~]# kadmin.local --help kadmin.local: invalid option -- '-' Usage: kadmin.local [-r realm] [-p principal] [-q query] [clnt|local args] [command args...] clnt args: [-s admin_server[:port]] -c ccache]]|[-n] local args: [-x db_args]* [-d dbname] [-e "enc:salt ..."] [-m]where, [-x db_args]* - any number of database specific arguments. Look at each database documentation for supported arguments [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin.local -q "addprinc cdh-master/admin" Authenticating as principal root/[email protected] with password. WARNING: no policy specified for cdh-master/[email protected]; defaulting to no policy Enter password for principal "cdh-master/[email protected]": Re-enter password for principal "cdh-master/[email protected]": Principal "cdh-master/[email protected]" created. [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# cd /etc [root@retail1 etc]# find . -cmin -5 ./systemd/system/multi-user.target.wants ./systemd/system/multi-user.target.wants/kadmin.service ./systemd/system/multi-user.target.wants/krb5kdc.service [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# find /var -cmin -5 /var/kerberos/krb5kdc/principal /var/kerberos/krb5kdc/principal.ok /var/spool/abrt /var/spool/abrt/Python-2020-10-28-17:44:12-16787 /var/spool/abrt/last-via-server /var/log/catalogd/catalogd.retail1.impala.log.INFO.20201028-171133.6600 /var/log/sa/sa29 /var/log/solr/solr-cmf-solr-SOLR_SERVER-retail1.log.out /var/log/oozie/oozie-cmf-oozie-OOZIE_SERVER-retail1.log.out /var/log/oozie/oozie-instrumentation.log /var/log/audit/audit.log /var/log/hive/metrics-hivemetastore /var/log/hive/metrics-hivemetastore/metrics.log /var/log/hive/metrics-hivemetastore/.metrics.log.crc /var/log/hive/hadoop-cmf-hive-HIVEMETASTORE-retail1.log.out /var/log/secure /var/log/messages /var/log/teamviewer12 /var/log/teamviewer12/TeamViewer12_Logfile_OLD.log /var/log/teamviewer12/TeamViewer12_Logfile.log /var/log/cron /var/log/hadoop-hdfs/hadoop-cmf-hdfs-DATANODE-retail1.log.out /var/lib/rpm/__db.003 /var/lib/rpm/__db.002 /var/lib/rpm/__db.001 /var/lib/rsyslog /var/lib/rsyslog/imjournal.state /var/lib/mysql/ib_logfile1 /var/lib/mysql/scm/CM_VERSION.ibd /var/lib/mysql/ibdata1 /var/lib/mysql/mysql/innodb_index_stats.ibd /var/lib/mysql/mysql/innodb_table_stats.ibd /var/lib/mysql/hive/PARTITION_KEYS.ibd /var/lib/mysql/hive/PARTITION_PARAMS.ibd /var/lib/mysql/hive/PARTITIONS.ibd /var/lib/mysql/hive/TBLS.ibd /var/lib/mysql/hive/CDS.ibd /var/lib/mysql/hive/TABLE_PARAMS.ibd /var/lib/mysql/hive/DBS.ibd /var/lib/mysql/hive/SEQUENCE_TABLE.ibd /var/lib/mysql/hive/SERDE_PARAMS.ibd /var/lib/mysql/hive/PARTITION_KEY_VALS.ibd /var/lib/mysql/hive/SDS.ibd /var/lib/mysql/hive/SERDES.ibd /var/lib/mysql/hive/COLUMNS_V2.ibd /var/lib/mysql/ib_logfile0 [root@retail1 etc]# vim /var/kerberos/krb5kdc/principal [root@retail1 etc]# [root@retail1 etc]# [root@retail1 etc]# vim /var/kerberos/krb5kdc/kadm5.acl [root@retail1 etc]# cat /var/kerberos/krb5kdc/kadm5.acl */[email protected] * [root@retail1 etc]# cd /var/kerberos/ [root@retail1 kerberos]# ls krb5 krb5kdc [root@retail1 kerberos]# cd krb5 [root@retail1 krb5]# ls user [root@retail1 krb5]# ls user [root@retail1 krb5]# ls -al total 12 drwxr-xr-x. 3 root root 4096 Apr 1 2020 . drwxr-xr-x. 4 root root 4096 Oct 28 17:38 .. drwxr-xr-x. 2 root root 4096 Apr 1 2020 user [root@retail1 krb5]# ls -al user/ total 8 drwxr-xr-x. 2 root root 4096 Apr 1 2020 . drwxr-xr-x. 3 root root 4096 Apr 1 2020 .. [root@retail1 krb5]# cd .. [root@retail1 kerberos]# ls krb5 krb5kdc [root@retail1 kerberos]# cd krb5kdc/ [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# ls -lhtr total 28K -rw------- 1 root root 451 Oct 29 10:33 kdc.conf.bak -rw------- 1 root root 466 Oct 29 10:34 kdc.conf -rw------- 1 root root 21 Oct 29 10:35 kadm5.acl -rw------- 1 root root 8.0K Oct 29 10:53 principal.kadm5 -rw------- 1 root root 0 Oct 29 10:53 principal.kadm5.lock -rw------- 1 root root 0 Oct 29 13:30 principal.ok -rw------- 1 root root 8.0K Oct 29 13:30 principal [root@retail1 krb5kdc]# cat kdc.conf [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88

[realms] DOMAIN.COM = { master_key_type = aes256-cts acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal max_life = 25h max_renewable_life = 8d } [root@retail1 krb5kdc]# useradd ldap [root@retail1 krb5kdc]# vim /etc/passwd [root@retail1 krb5kdc]# passwd ldap Changing password for user ldap. New password: Retype new password: passwd: all authentication tokens updated successfully. [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# yum install db4 db4-utils db4-devel cyrus-sasl* krb5-server-ldap -y Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.tuna.tsinghua.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com Resolving Dependencies --> Running transaction check ---> Package cyrus-sasl.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-devel.x86_64 0:2.1.26-23.el7 will be installed ---> Package cyrus-sasl-gs2.x86_64 0:2.1.26-23.el7 will be installed ---> Package cyrus-sasl-gssapi.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl-gssapi.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-ldap.x86_64 0:2.1.26-23.el7 will be installed ---> Package cyrus-sasl-lib.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl-lib.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-md5.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl-md5.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-ntlm.x86_64 0:2.1.26-23.el7 will be installed ---> Package cyrus-sasl-plain.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl-plain.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-scram.x86_64 0:2.1.26-20.el7_2 will be updated ---> Package cyrus-sasl-scram.x86_64 0:2.1.26-23.el7 will be an update ---> Package cyrus-sasl-sql.x86_64 0:2.1.26-23.el7 will be installed ---> Package krb5-server-ldap.x86_64 0:1.15.1-46.el7 will be installed ---> Package libdb4.x86_64 0:4.8.30-13.el7 will be installed ---> Package libdb4-devel.x86_64 0:4.8.30-13.el7 will be installed ---> Package libdb4-utils.x86_64 0:4.8.30-13.el7 will be installed --> Finished Dependency Resolution

Dependencies Resolved

Installing: cyrus-sasl-devel x86_64 2.1.26-23.el7 base 310 k cyrus-sasl-gs2 x86_64 2.1.26-23.el7 base 41 k cyrus-sasl-ldap x86_64 2.1.26-23.el7 base 36 k cyrus-sasl-ntlm x86_64 2.1.26-23.el7 base 42 k cyrus-sasl-sql x86_64 2.1.26-23.el7 base 38 k krb5-server-ldap x86_64 1.15.1-46.el7 base 195 k libdb4 x86_64 4.8.30-13.el7 epel 607 k libdb4-devel x86_64 4.8.30-13.el7 epel 32 k libdb4-utils x86_64 4.8.30-13.el7 epel 134 k Updating: cyrus-sasl x86_64 2.1.26-23.el7 base 88 k cyrus-sasl-gssapi x86_64 2.1.26-23.el7 base 41 k cyrus-sasl-lib x86_64 2.1.26-23.el7 base 155 k cyrus-sasl-md5 x86_64 2.1.26-23.el7 base 57 k cyrus-sasl-plain x86_64 2.1.26-23.el7 base 39 k cyrus-sasl-scram x86_64 2.1.26-23.el7 base 43 k

Install 9 Packages Upgrade 6 Packages

Total 769 kB/s | 1.8 MB 00:00:02 Running transaction check Running transaction test Transaction test succeeded Running transaction Updating : cyrus-sasl-lib-2.1.26-23.el7.x86_64 1/21 Installing : libdb4-4.8.30-13.el7.x86_64 2/21 Updating : cyrus-sasl-2.1.26-23.el7.x86_64 3/21 Installing : cyrus-sasl-devel-2.1.26-23.el7.x86_64 4/21 Installing : libdb4-utils-4.8.30-13.el7.x86_64 5/21 Installing : libdb4-devel-4.8.30-13.el7.x86_64 6/21 Updating : cyrus-sasl-md5-2.1.26-23.el7.x86_64 7/21 Installing : cyrus-sasl-gs2-2.1.26-23.el7.x86_64 8/21 Updating : cyrus-sasl-gssapi-2.1.26-23.el7.x86_64 9/21 Updating : cyrus-sasl-scram-2.1.26-23.el7.x86_64 10/21 Installing : cyrus-sasl-ntlm-2.1.26-23.el7.x86_64 11/21 Installing : cyrus-sasl-sql-2.1.26-23.el7.x86_64 12/21 Updating : cyrus-sasl-plain-2.1.26-23.el7.x86_64 13/21 Installing : cyrus-sasl-ldap-2.1.26-23.el7.x86_64 14/21 Installing : krb5-server-ldap-1.15.1-46.el7.x86_64 15/21 Cleanup : cyrus-sasl-2.1.26-20.el7_2.x86_64 16/21 Cleanup : cyrus-sasl-plain-2.1.26-20.el7_2.x86_64 17/21 Cleanup : cyrus-sasl-scram-2.1.26-20.el7_2.x86_64 18/21 Cleanup : cyrus-sasl-gssapi-2.1.26-20.el7_2.x86_64 19/21 Cleanup : cyrus-sasl-md5-2.1.26-20.el7_2.x86_64 20/21 Cleanup : cyrus-sasl-lib-2.1.26-20.el7_2.x86_64 21/21 Verifying : libdb4-utils-4.8.30-13.el7.x86_64 1/21 Verifying : cyrus-sasl-md5-2.1.26-23.el7.x86_64 2/21 Verifying : libdb4-devel-4.8.30-13.el7.x86_64 3/21 Verifying : cyrus-sasl-gs2-2.1.26-23.el7.x86_64 4/21 Verifying : cyrus-sasl-gssapi-2.1.26-23.el7.x86_64 5/21 Verifying : cyrus-sasl-scram-2.1.26-23.el7.x86_64 6/21 Verifying : cyrus-sasl-ntlm-2.1.26-23.el7.x86_64 7/21 Verifying : cyrus-sasl-sql-2.1.26-23.el7.x86_64 8/21 Verifying : libdb4-4.8.30-13.el7.x86_64 9/21 Verifying : cyrus-sasl-plain-2.1.26-23.el7.x86_64 10/21 Verifying : cyrus-sasl-lib-2.1.26-23.el7.x86_64 11/21 Verifying : krb5-server-ldap-1.15.1-46.el7.x86_64 12/21 Verifying : cyrus-sasl-devel-2.1.26-23.el7.x86_64 13/21 Verifying : cyrus-sasl-ldap-2.1.26-23.el7.x86_64 14/21 Verifying : cyrus-sasl-2.1.26-23.el7.x86_64 15/21 Verifying : cyrus-sasl-md5-2.1.26-20.el7_2.x86_64 16/21 Verifying : cyrus-sasl-gssapi-2.1.26-20.el7_2.x86_64 17/21 Verifying : cyrus-sasl-2.1.26-20.el7_2.x86_64 18/21 Verifying : cyrus-sasl-lib-2.1.26-20.el7_2.x86_64 19/21 Verifying : cyrus-sasl-plain-2.1.26-20.el7_2.x86_64 20/21 Verifying : cyrus-sasl-scram-2.1.26-20.el7_2.x86_64 21/21

Installed: cyrus-sasl-devel.x86_64 0:2.1.26-23.el7 cyrus-sasl-gs2.x86_64 0:2.1.26-23.el7 cyrus-sasl-ldap.x86_64 0:2.1.26-23.el7 cyrus-sasl-ntlm.x86_64 0:2.1.26-23.el7 cyrus-sasl-sql.x86_64 0:2.1.26-23.el7 krb5-server-ldap.x86_64 0:1.15.1-46.el7 libdb4.x86_64 0:4.8.30-13.el7 libdb4-devel.x86_64 0:4.8.30-13.el7 libdb4-utils.x86_64 0:4.8.30-13.el7

Updated: cyrus-sasl.x86_64 0:2.1.26-23.el7 cyrus-sasl-gssapi.x86_64 0:2.1.26-23.el7 cyrus-sasl-lib.x86_64 0:2.1.26-23.el7 cyrus-sasl-md5.x86_64 0:2.1.26-23.el7 cyrus-sasl-plain.x86_64 0:2.1.26-23.el7 cyrus-sasl-scram.x86_64 0:2.1.26-23.el7

Complete! [root@retail1 krb5kdc]# yum install openldap openldap-servers openldap-clients openldap-devel compat-openldap -y Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.bfsu.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com Package openldap-2.4.44-21.el7_6.x86_64 already installed and latest version Package openldap-clients-2.4.44-21.el7_6.x86_64 already installed and latest version Resolving Dependencies --> Running transaction check ---> Package compat-openldap.x86_64 1:2.3.43-5.el7 will be installed ---> Package openldap-devel.x86_64 0:2.4.44-21.el7_6 will be installed ---> Package openldap-servers.x86_64 0:2.4.44-21.el7_6 will be installed --> Finished Dependency Resolution

Dependencies Resolved

Installing: compat-openldap x86_64 1:2.3.43-5.el7 base 174 k openldap-devel x86_64 2.4.44-21.el7_6 base 804 k openldap-servers x86_64 2.4.44-21.el7_6 base 2.2 M

Install 3 Packages

Total 6.9 MB/s | 3.1 MB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : 1:compat-openldap-2.3.43-5.el7.x86_64 1/3 Installing : openldap-devel-2.4.44-21.el7_6.x86_64 2/3 Installing : openldap-servers-2.4.44-21.el7_6.x86_64 3/3 Verifying : openldap-servers-2.4.44-21.el7_6.x86_64 1/3 Verifying : openldap-devel-2.4.44-21.el7_6.x86_64 2/3 Verifying : 1:compat-openldap-2.3.43-5.el7.x86_64 3/3

Installed: compat-openldap.x86_64 1:2.3.43-5.el7 openldap-devel.x86_64 0:2.4.44-21.el7_6 openldap-servers.x86_64 0:2.4.44-21.el7_6

Complete! [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# cd /var/lib/ldap/ [root@retail1 ldap]# ls [root@retail1 ldap]# ls -a . .. [root@retail1 ldap]# cp /usr/share/openldap-servers/DB_CONFIG.example DB_CONFIG [root@retail1 ldap]# ls DB_CONFIG [root@retail1 ldap]# cd DB -bash: cd: DB: No such file or directory [root@retail1 ldap]# ls DB_CONFIG [root@retail1 ldap]# vim DB_CONFIG [root@retail1 ldap]# cp -rf /etc/openldap/slapd.d/ /etc/openldap/slapd.d.bak [root@retail1 ldap]# ls -lhtr /etc/openldap/slapd.d total 8.0K -rw------- 1 ldap ldap 589 Oct 29 14:01 cn=config.ldif drwxr-x--- 3 ldap ldap 4.0K Oct 29 14:01 cn=config [root@retail1 ldap]# KERBEROS_LDAP_VERSION=1.13.2 [root@retail1 ldap]# ls -lhtr /usr/share/doc/krb5-server-ldap-${KERBEROS_LDAP_VERSION}/kerberos.schema ls: cannot access /usr/share/doc/krb5-server-ldap-1.13.2/kerberos.schema: No such file or directory [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# ls -lhtr /usr/share/doc/krb5-server-ldap* total 84K -rw-r--r-- 1 root root 25K Mar 3 2017 kerberos.schema -rw-r--r-- 1 root root 28K Mar 3 2017 kerberos.ldif -rw-r--r-- 1 root root 25K Mar 3 2017 60kerberos.ldif [root@retail1 ldap]# ls -lhtr /usr/share/doc/krb5-server-ldap ls: cannot access /usr/share/doc/krb5-server-ldap: No such file or directory [root@retail1 ldap]# ls -lhtr /usr/share/doc/ total 4.3M drwxr-xr-x. 2 root root 4.0K Jan 18 2017 policycoreutils lrwxrwxrwx. 1 root root 14 Aug 5 2017 redhat-release -> centos-release drwxr-xr-x. 2 root root 4.0K Aug 5 2017 centos-release drwxr-xr-x. 2 root root 4.0K Aug 5 2017 setup-2.8.71 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ncurses-base-5.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 tzdata-2016g drwxr-xr-x. 2 root root 4.0K Aug 5 2017 bash-4.2.46 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pcre-8.32 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 info-5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 xz-libs-5.2.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 sed-4.2.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 popt-1.13 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libcom_err-1.42.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libdb-5.3.21 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 bzip2-libs-1.0.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 grep-2.20 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 readline-6.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gawk-4.0.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libcap-ng-0.7.5 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libffi-3.0.13 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libgpg-error-1.12 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libcap-2.22 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libgcrypt-1.5.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libxml2-2.9.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libnl3-3.2.28 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 p11-kit-0.20.7 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 sqlite-3.7.17 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 lua-5.1.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 findutils-4.5.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 diffutils-3.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 jansson-2.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libidn-1.28 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 file-libs-5.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gmp-6.0.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pciutils-libs-3.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libmnl-1.0.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 file-5.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libnl3-cli-3.2.28 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libassuan-2.1.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 e2fsprogs-libs-1.42.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 groff-base-1.22.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 xz-5.2.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 which-2.20 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libunistring-0.9.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 sysvinit-tools-2.88 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libtasn1-3.8 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ca-certificates-2015.2.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libnfnetlink-1.0.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 slang-2.2.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 newt-0.52.15 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 tcp_wrappers-libs-7.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 lzo-2.06 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 hostname-3.13 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 keyutils-libs-1.5.8 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ethtool-4.5 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gdbm-1.10 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iptables-1.4.21 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iproute-3.10.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 less-458 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libteam-1.25 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ipset-libs-6.19 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ipset-6.19 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 nettle-2.7.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pkgconfig-0.27.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 glib2-2.46.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 shared-mime-info-1.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libcroco-0.6.8 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gobject-introspection-1.42.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gsettings-desktop-schemas-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dbus-glib-0.100 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 tar-1.26 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 acl-2.2.51 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libss-1.42.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pinentry-0.8.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 mozjs17-17.0.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 make-3.82 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 GeoIP-1.5.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libedit-3.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ncurses-5.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libmodman-2.0.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libproxy-0.4.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 snappy-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libpcap-1.5.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libverto-0.2.5 drwxr-xr-x. 5 root root 4.0K Aug 5 2017 coreutils-8.22 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gzip-1.5 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 cracklib-2.9.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 python-decorator-3.4.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dbus-python-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libpwquality-1.2.3 drwxr-xr-x. 4 root root 4.0K Aug 5 2017 pam-1.1.8 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 procps-ng-3.3.10 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pygobject3-base-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 centos-logos-70.0.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 python-pyudev-0.15 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 python-iniparse-0.4 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 python-slip-0.4.0 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 python-slip-dbus-0.4.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 newt-python-0.52.15 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 yum-metadata-parser-1.1.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 python-configobj-4.7.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pyliblzma-0.5.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pyxattr-0.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 grubby-8.28 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 logrotate-3.8.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 binutils-2.25.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libssh2-1.4.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 rpm-4.11.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libuser-0.60 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dhcp-common-4.2.5 drwxr-xr-x. 5 root root 4.0K Aug 5 2017 python-pycurl-7.19.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 python-urlgrabber-3.10 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 fipscheck-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pth-2.0.7 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 gnupg2-2.0.22 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gpgme-1.3.2 drwxr-xr-x. 4 root root 4.0K Aug 5 2017 pygpgme-0.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 yum-plugin-fastestmirror-1.1.31 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 yum-3.4.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libndp-1.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libdaemon-0.14 drwxr-xr-x. 4 root root 4.0K Aug 5 2017 teamd-1.25 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dmidecode-3.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 qrencode-libs-3.4.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libaio-0.3.109 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 device-mapper-persistent-data-0.6.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ustr-1.0.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 shadow-utils-4.1.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libutempter-1.1.6 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 device-mapper-1.02.135 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dracut-033 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 kmod-20 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dbus-1.6.12 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 polkit-0.112 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 polkit-pkla-compat-0.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iputils-20160308 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 initscripts-9.49.37 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dhclient-4.2.5 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 wpa_supplicant-2.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 os-prober-1.58 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 hwdata-0.252 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 cronie-1.4.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 openssh-6.6.1p1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libpciaccess-0.13.4 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libdrm-2.4.67 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 plymouth-0.8.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 pciutils-3.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 grub2-tools-2.02 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 dnsmasq-2.66 drwxr-xr-x. 4 root root 4.0K Aug 5 2017 ppp-2.4.5 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ebtables-2.0.10 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 trousers-0.3.13 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 gnutls-3.3.24 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 glib-networking-2.42.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libsoup-2.48.1 drwxr-xr-x. 3 root root 4.0K Aug 5 2017 NetworkManager drwxr-xr-x. 2 root root 4.0K Aug 5 2017 fxload-2002_04_11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 alsa-firmware-1.0.28 drwxr-xr-x. 6 root root 4.0K Aug 5 2017 alsa-tools-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 virt-what-1.13 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libestr-0.1.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 lsscsi-0.27 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libpipeline-1.2.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 json-c-0.11 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 linux-firmware-20160830 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 kbd-1.15.5 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 rsyslog-7.4.7 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 man-db-2.6.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iprutils-2.4.13.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 tuned-2.7.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 lvm2-2.02.166 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 kexec-tools-2.0.7 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 grub2-2.02 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 authconfig-6.2.8 drwxr-xr-x. 4 root root 4.0K Aug 5 2017 postfix-2.10.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 irqbalance-1.0.7 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 aic94xx-firmware-30 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 biosdevname-0.7.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 microcode_ctl drwxr-xr-x. 2 root root 4.0K Aug 5 2017 parted-3.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 passwd-0.79 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 sudo-1.8.6p7 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 btrfs-progs-4.4.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 xfsprogs-4.5.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 e2fsprogs-1.42.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 libsysfs-2.1.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl6000g2b-firmware-17.168.5.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl100-firmware-39.31.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl6050-firmware-41.28.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl2030-firmware-18.168.6.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl6000g2a-firmware-17.168.5.3 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl5000-firmware-8.83.5.1_1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl5150-firmware-8.24.2.2 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl6000-firmware-9.221.4.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl7265-firmware-22.0.7.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl3160-firmware-22.0.7.0 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl3945-firmware-15.32.2.9 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl105-firmware-18.168.6.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 ivtv-firmware-20080701 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl135-firmware-18.168.6.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl2000-firmware-18.168.6.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl1000-firmware-39.31.5.1 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl4965-firmware-228.61.2.24 drwxr-xr-x. 2 root root 4.0K Aug 5 2017 iwl7260-firmware-22.0.7.0 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-parent-0.225 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 perl-HTTP-Tiny-0.033 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-podlators-2.5.1 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Pod-Perldoc-3.20 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Encode-2.51 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Text-ParseWords-3.29 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Pod-Usage-1.63 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Storable-2.45 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Exporter-5.68 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 perl-constant-1.27 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Time-Local-1.2300 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Socket-2.010 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Carp-1.26 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Time-HiRes-1.9725 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-PathTools-3.40 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Scalar-List-Utils-1.27 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-Pod-Simple-3.28 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 perl-File-Temp-0.23.01 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-File-Path-2.09 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-threads-shared-1.43 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 perl-threads-1.87 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 perl-Filter-1.49 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 perl-Getopt-Long-2.40 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 glibc-common-2.17 drwxr-xr-x. 3 root root 4.0K Aug 9 2017 mpfr-3.1.1 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 libmpc-1.0.1 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 libX11-common-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 libXxf86vm-1.1.3 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 mesa-libGL-11.2.2 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 libXt-1.1.4 drwxr-xr-x. 2 root root 4.0K Aug 9 2017 libXmu-1.1.2 drwxr-xr-x. 4 root root 4.0K Aug 20 2017 NVIDIA_GLX-1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 vim-common-7.4.160 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 glibc-2.17 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libuuid-2.23.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libblkid-2.23.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmount-2.23.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 expat-2.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 freetype-2.4.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 zlib-1.2.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libICE drwxr-xr-x. 2 root root 4.0K Aug 20 2017 alsa-lib-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 alsa-lib drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXau-1.0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXext-1.3.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXfixes-5.0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXdamage-1.1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXinerama-1.1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXi-1.7.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libSM-1.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 util-linux-2.23.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 atk-2.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fontconfig-2.10.95 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libjpeg-turbo-1.2.90 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 json-glib-1.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpng-1.5.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer1-1.4.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXcomposite-0.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libusbx-1.0.20 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsecret-0.18.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 satyr-0.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXrender-0.9.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXrandr-1.4.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 systemd drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cups-libs-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 librevenge-0.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lcms2-2.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXtst-1.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libicu-50.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libogg-1.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mesa-libgbm-11.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mesa-libEGL-11.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-glib-0.24.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 augeas-libs-1.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvorbis-1.3.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtar-1.2.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libarchive-3.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cairo-1.14.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 libbluray-0.2.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libxslt-1.1.28 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rest-0.7.92 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsigc++20-2.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libexif-0.6.21 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xmlrpc-c-1.32.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 yajl-2.0.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 orc-0.4.22 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtool-ltdl-2.4.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dconf-0.22.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 NetworkManager-1.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 glibmm24-2.42.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXcursor-1.1.14 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hunspell-en-US-0.20121024 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hunspell-1.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXv-1.0.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cairomm-1.10.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 flac-libs-1.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtheora-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libodfgen-0.1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libv4l-0.9.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libxml2-python-2.9.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 atkmm-2.22.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 totem-pl-parser-3.10.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmwaw-0.3.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 geocode-glib-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmbim-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hicolor-icon-theme-0.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-icon-theme-3.12.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 speex-1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liberation-fonts-common-1.07.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdvdread drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libxkbfile-1.0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libplist-1.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgee-0.10.1 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 pygobject2-2.28.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libraw1394-2.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gsm-1.0.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsndfile-1.0.25 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 enchant-1.6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 raptor2-2.0.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 celt051-0.5.1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libetonyek-0.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwpd-0.10.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 iscsi-initiator-utils-6.2.0.873 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 accountsservice-0.6.35 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usbredir-0.7.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liboauth-0.9.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 exempi-2.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hyperv-daemons-license-0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 psmisc-22.20 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 GConf2-3.2.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 bzip2-1.0.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pyparted-3.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 wavpack-4.60.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXdmcp-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnu-free-fonts-common-20120503 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 taglib-1.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dejavu-fonts-common-2.33 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libical-1.0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 openjpeg-libs-1.5.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xkeyboard-config-2.14 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libevent-2.0.21 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fuse-libs-2.9.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libieee1284-0.2.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 graphite2-1.3.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 harfbuzz-0.9.36 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 geoclue2-2.1.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 bluez-5.41 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwpg-0.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libavc1394-0.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libiec61883-1.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usbmuxd-1.0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libimobiledevice-1.1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 upower-0.99.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdvdnav-5.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libshout-2.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libqmi-1.16.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-logger-0.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libosinfo-0.3.0 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 pycairo-1.8.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-mission-control-5.16.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-augeas-0.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwps-0.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcgroup-0.41 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lockdev-1.0.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgusb-0.1.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 colord-libs-1.2.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mailx-12.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mozjs24-24.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 jasper-libs-1.900.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpinyin-0.9.93 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libthai-0.1.14 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 opus-1.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cryptsetup-1.7.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 soundtouch-1.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mesa-private-llvm-3.8.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvpx-1.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 m17n-db-1.6.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 elfutils-0.166 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libibverbs-1.2.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 giflib-4.1.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hyphen-2.8.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usermode-1.111 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fuse-2.9.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libbasicobjects-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcdio-0.92 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcollection-0.6.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gdb-7.6.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-IPy-0.75 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 clucene-core-2.3.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libiscsi-1.9.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 bind-license-9.9.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gssdp-0.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gupnp-0.20.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gupnp-igd-0.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dleyna-core-0.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 poppler-data-0.4.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvisual-0.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgtop2-2.28.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libfontenc-1.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXfont-1.5.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-font-utils-7.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libevdev-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 langtable-0.0.31 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mobile-broadband-provider-info-1.20120614 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXxf86misc-1.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libnl-1.1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libusal-1.1.11 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 genisoimage-1.1.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgee06-0.6.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdv-1.0.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xml-common-0.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 iso-codes-3.46 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libxklavier-5.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xcb-util-0.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 startup-notification-0.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libref_array-0.1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtirpc-0.2.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rpcbind-0.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lzop-1.03 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dosfstools-3.0.20 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 imsettings-libs-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 unzip-6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 deltarpm-3.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libconfig-1.4.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libstoragemgmt-1.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libreport-2.1.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-meh-0.25.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mdadm-3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pykickstart-1.99.66.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lldpad-1.0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-deltarpm-3.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 createrepo-0.9.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 iw-4.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-ethtool-0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcmis-0.5.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 urw-fonts-2.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ghostscript-fonts-5.50 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dleyna-connector-dbus-0.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gupnp-av-0.12.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcdio-paranoia-10.2+0.90 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 librdmacm-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 m17n-lib-1.6.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mesa-libxatracker-11.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liborcus-0.7.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-salut-0.8.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-server-common-1.17.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 oddjob-0.31.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 oddjob-mkhomedir-0.31.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 realmd-0.16.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 spice-server-0.12.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rasqal-0.9.30 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 redland-1.0.16 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 device-mapper-multipath-libs-0.4.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 device-mapper-multipath-0.4.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fcoe-utils-1.0.31 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsamplerate-0.1.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 alsa-utils-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 PackageKit-1.0.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 freerdp-libs-1.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-dmidecode-3.10.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXvMC-1.0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 glusterfs-3.7.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hunspell-en-GB-0.20121024 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgovirt-0.3.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-lxml-3.2.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-javapackages-3.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 javapackages-tools-3.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tagsoup-1.2.1 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 audit-2.6.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmspub-0.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcdr-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gdisk-0.8.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvisio-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 brltty-4.5 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 brlapi-0.6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libfreehand-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 compat-libcolord1-1.0.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libabw-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpagemaker-0.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-cups-1.9.63 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cups-pk-helper-0.2.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 radvd-1.9.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hplip-common-3.15.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usb_modeswitch-data-20160612 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usb_modeswitch-2.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 net-tools-2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 chrony-2.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rtkit-0.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXft-2.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pango-1.36.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer1-plugins-base-1.4.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pangomm-2.34.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gupnp-dlna-0.10.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dleyna-server-0.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 paps-libs-0.6.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-nss-0.16.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libatasmart-0.19 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 udisks2-2.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libGLEW-1.10.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-Compress-Raw-Bzip2-2.061 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 yelp-xsl-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-Net-Daemon-0.48 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libasyncns-0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pulseaudio-libs-6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libao-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 festival-speechtools-libs-1.2.96 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 festival-lib-1.96 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 festvox-slt-arctic-hts-0.20061229 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 festival-1.96 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sox-14.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 festival-freebsoft-utils-0.10 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 espeak-1.47.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXxf86dga-1.1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXpm-3.5.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gd-2.0.35 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgphoto2-2.5.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mesa-filesystem-11.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 setools-libs-3.3.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fftw-libs-double-3.3.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libofa-0.9.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 google-crosextra-carlito-fonts-1.103 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 flite-1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 khmeros-fonts-common-5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liblangtag-0.5.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 adwaita-cursor-theme-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 adwaita-icon-theme-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 jbigkit-libs-2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtiff-4.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gdk-pixbuf2-2.31.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gtk2-2.24.28 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libnotify-0.7.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cogl-1.18.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 librsvg2-2.39.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 compat-libcogl12-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 poppler-0.26.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 compat-libcogl-pango12-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer1-plugins-good-1.4.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sane-backends-1.0.24 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 system-config-printer-libs-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pygtk2-2.24.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmediaart-0.7.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgxps-0.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gutenprint-5.2.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libspectre-0.2.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gtkmm24-2.24.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libglade2-2.6.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libappstream-glib-0.3.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgsf-1.14.26 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libfprint-0.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fprintd-0.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cups-filters-libs-1.0.35 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sg3_utils-libs-1.37 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-ntplib-0.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwebp-0.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 setroubleshoot-plugins-3.0.64 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 setroubleshoot-server-3.2.27.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sgpio-1.2.0.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dmraid-1.0.0.rc16 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pyblock-0.53 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 thai-scalable-fonts-common-0.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-xauth-1.0.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-xinit-1.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 imsettings-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 imsettings-gsettings-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xdg-user-dirs-0.15 drwxr-xr-x. 4 root root 4.0K Aug 20 2017 HTML drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dotconf-1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 speech-dispatcher-0.7.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmpcdec-1.2.6 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 nmap-ncat-6.40 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sbc-1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liblouis-2.5.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 liblouis-python-2.5.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-six-1.9.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sos-3.3 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 abrt-dbus-2.1.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 abrt-2.1.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libchewing-0.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwvstreams-4.6.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ipxe-roms-qemu-20160127 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libexttextcat-3.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdnet-1.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libreoffice-opensymbol-fonts-5.0.6.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 webrtc-audio-processing-0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pulseaudio-6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 check-0.9.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdmapsharing-2.9.30 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-inotify-0.9.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lksctp-tools-1.0.17 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 meanwhile-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsss_nss_idmap-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 abattis-cantarell-fonts-0.0.16 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-themes-standard-3.14.2.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXevie-1.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 at-spi2-core-2.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 at-spi2-atk-2.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gtk3-3.14.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-desktop3-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 clutter-1.20.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 clutter-gtk-1.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gcr-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 webkitgtk3-2.4.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-online-accounts-3.14.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 clutter-gst2-2.0.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgweather-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgdata-0.17.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 zenity-3.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gjs-1.42.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 evince-libs-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 evolution-data-server-3.12.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gtksourceview3-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 grilo-0.2.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpeas-1.12.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgnomekbd-3.6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 folks-0.10.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libzapojit-0.0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libchamplain-0.12.4 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 gnome-session drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-session-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-bluetooth-libs-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 colord-gtk-0.1.25 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pyatspi-2.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 caribou-0.4.16 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-keyring-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 keybinder3-0.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gtkmm30-3.8.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 vino-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 glade-libs-3.15.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libtimezonemap-0.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sound-theme-freedesktop-0.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libcanberra-0.30 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cheese-libs-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-packagekit-common-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 metacity-2.34.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mutter-3.14.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 colord-1.2.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libXres-1.0.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwnck3-3.4.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpath_utils-0.2.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libini_config-1.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gssproxy-0.4.1 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 attr-2.4.46 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 bridge-utils-1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 netcf-libs-0.2.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgdither-0.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gavl-1.4.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 frei0r-plugins-1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-video-effects-0.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tigervnc-1.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-backports-ssl_match_hostname-3.4.0.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 python-setuptools-0.9.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-coverage-3.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libunwind-1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 qemu-kvm drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mtdev-1.1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fros-1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdwarf-20130207 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dyninst-8.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libseccomp-2.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 zip-3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 isomd5sum-1.0.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mtools-4.0.18 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 net-snmp-libs-5.7.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 bc-1.06.95 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libepoxy-1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-qxl-0.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-void-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-intel-2.99.917 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-synaptics-1.8.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-wacom-0.29.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xorg-x11-drv-evdev-2.9.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 autocorr-en-5.0.6.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mythes-1.2.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-di-0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 redhat-menus-12.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-menus-3.13.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 autogen-libopts-5.18 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 vte291-0.38.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-terminal-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lsof-4.87 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 firewalld-0.4.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-Data-Dumper-2.145 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsss_idmap-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 marisa-0.2.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 quota-nls-4.01 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwacom-data-0.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libwacom-0.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-settings-daemon-3.14.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer-0.10.36 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer-plugins-base-0.10.36 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libnice-0.1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-gabble-0.18.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer-plugins-good-0.10.31 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer-plugins-bad-free-0.10.23 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 farstream-0.1.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-chardet-2.2.1 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 python-kitchen-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 yum-utils-1.1.31 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 control-center-3.14.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 skkdic-20130104 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libkkc-0.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lpsolve-5.5.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 keyutils-1.5.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tcp_wrappers-7.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 quota-4.01 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 nhn-nanum-fonts-common-3.020 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ncompress-4.2.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 file-roller-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-user-docs-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pytz-2012d drwxr-xr-x. 2 root root 4.0K Aug 20 2017 opencc-0.4.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libhangul-0.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cryptsetup-python-1.7.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 python-blivet-0.61.15.59 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmspack-0.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 open-vm-tools-10.0.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libiptcdata-1.0.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tracker-1.2.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 grilo-plugins-0.2.14 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 desktop-file-utils-0.22 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-1.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gvfs-1.22.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 nautilus-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xdg-utils-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-abrt-0.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-online-miners-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-table-1.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 yelp-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-bluetooth-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-shell-3.14.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gdm-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-shell-extension-common-3.14.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pakchois-0.4 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 neon-0.30.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libmusicbrainz5-5.0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libdmx-1.1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 spice-protocol-0.12.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libpurple-2.10.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-haze-0.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 qpdf-libs-5.0.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cups-filters-1.0.35 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cups-1.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ttmkfdir-3.0.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 jline-1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-Compress-Raw-Zlib-2.061 drwxr-xr-x. 4 root root 4.0K Aug 20 2017 perl-IO-Compress-2.061 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-PlRPC-0.2020 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 perl-DBI-1.627 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 perl-DBD-SQLite-1.39 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libgnome-keyring-3.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libnfsidmap-0.25 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 nfs-utils-1.3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libuser-python-0.60 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 anaconda-core-21.48.22.93 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 initial-setup-0.3.9.36 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ldns-1.6.16 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 unbound-libs-1.4.20 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnutls-utils-3.3.24 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvirt-client-2.0.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvirt-daemon-2.0.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libvirt-glib-0.2.3 drwxr-xr-x. 4 root root 4.0K Aug 20 2017 libreswan-3.15 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 NetworkManager-libreswan-1.2.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 libsrtp-1.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gstreamer1-plugins-bad-free-1.4.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 farstream02-0.2.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 telepathy-farstream-0.6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 totem-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 smc-fonts-common-6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 smc-meera-fonts-6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 empathy-3.12.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 cheese-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-boxes-3.14.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 system-config-printer-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rasdaemon-0.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 icedtea-web-1.6.2 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 unoconv-0.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 vinagre-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sushi-3.12.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-initial-setup-3.14.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-tweak-tool-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-table-chinese-1.4.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-documents-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pinfo-0.6.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gedit-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-libpinyin-1.6.91 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-m17n-1.3.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-chewing-1.4.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-sayura-1.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-hangul-1.4.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-rawcode-1.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ibus-kkc-1.5.18 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 eog-3.14.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-getting-started-docs-3.14.1.0.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 orca-3.6.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sssd-client-1.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-color-manager-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-software-3.14.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 systemtap-runtime-3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xfsdump-3.1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 firstboot-19.12 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-contacts-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-screenshot-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-disk-utility-3.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-clocks-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-system-monitor-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-calculator-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-weather-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 seahorse-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-font-viewer-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-system-log-3.9.90 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xdg-user-dirs-gtk-0.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-dictionary-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mousetweaks-3.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 baobab-3.14.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gucharmap-3.14.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 alsa-plugins-pulseaudio-1.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sysstat-10.1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 wvdial-1.61 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ledmon-0.79 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 fprintd-pam-0.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 paps-0.6.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 hunspell-en-0.20121024 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 python-smbc-1.0.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ModemManager-1.6.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 crda-3.13_2016.02.08 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 dvd+rw-tools-7.1 drwxr-xr-x. 4 root root 4.0K Aug 20 2017 wodim-1.1.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 yum-langpacks-0.4.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 setuptool-1.19.11 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 m17n-contrib-1.1.14 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 smartmontools-6.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-icon-theme-symbolic-3.12.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 gnome-icon-theme-extras-3.12.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 xvattr-1.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 psacct-6.6.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 avahi-0.6.31 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 spice-vdagent-0.14.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mcelog-136 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 at-3.1.13 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rng-tools-5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 qemu-guest-agent-2.5.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 usbutils-007 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 traceroute-2.0.22 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mlocate-0.26 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 nautilus-sendto-3.8.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ed-1.9 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 overpass-fonts-2.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sil-padauk-fonts-2.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 setserial-2.17 drwxr-xr-x. 19 root root 4.0K Aug 20 2017 man-pages-overrides-7.3.2 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 jomolhari-fonts-0.003 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-tamil-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tcsh-6.18.01 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 cjkuni-uming-fonts-0.2.20080216.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 paratype-pt-sans-fonts-20101909 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 ucs-miscfixed-fonts-0.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sil-nuosu-fonts-2.1.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 pm-utils-1.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 sil-abyssinica-fonts-1.200 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-kannada-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 madan-fonts-2.000 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-devanagari-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rdate-1.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-malayalam-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-bengali-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 bash-completion-2.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-nepali-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 man-pages-3.53 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 time-1.7 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 open-sans-fonts-1.10 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 nano-2.3.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-marathi-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 enscript-1.6.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 wqy-microhei-fonts-0.2.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-punjabi-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 blktrace-1.0.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-telugu-fonts-2.5.3 drwxr-xr-x. 3 root root 4.0K Aug 20 2017 pnm2ppa-1.04 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 strace-4.8 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-oriya-fonts-2.5.4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 crash-7.1.5 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lklug-fonts-0.6 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-assamese-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 mtr-0.85 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 wqy-zenhei-fonts-0.9.46 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 rfkill-0.4 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 stix-fonts-1.1.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 lohit-gujarati-fonts-2.5.3 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 words-3.0 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 paktype-naskh-basic-fonts-4.1 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 vlgothic-fonts-20130607 drwxr-xr-x. 2 root root 4.0K Aug 20 2017 tcpdump-4.5.1 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Test-Harness-3.28 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Pod-Parser-1.61 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Digest-1.17 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-XML-SAX-Base-1.08 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Encode-Locale-1.03 drwxr-xr-x 2 root root 4.0K Sep 26 2017 libmng-1.0.10 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-XML-NamespaceSupport-1.11 drwxr-xr-x 2 root root 4.0K Sep 26 2017 qt3-3.3.8b drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Digest-SHA-5.85 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Digest-MD5-2.52 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Pod-LaTeX-0.61 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Pod-Checker-1.60 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Pod-Plainer-1.03 drwxr-xr-x 4 root root 4.0K Sep 26 2017 perl-Test-Simple-0.98 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTML-Tagset-3.20 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-local-lib-1.008010 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Locale-Maketext-1.23 drwxr-xr-x 2 root root 4.0K Sep 26 2017 spax-1.5.2 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-TimeDate-2.30 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTTP-Date-6.02 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-File-Listing-6.04 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-IO-Socket-IP-0.21 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-File-CheckTree-4.42 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Text-Unidecode-0.04 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Text-Soundex-3.04 drwxr-xr-x 3 root root 4.0K Sep 26 2017 foomatic-filters-4.0.9 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-FCGI-0.74 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-CGI-3.63 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Class-ISA-0.36 drwxr-xr-x 4 root root 4.0K Sep 26 2017 perl-Business-ISBN-Data-20120719.001 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Business-ISBN-2.06 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-URI-1.60 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-WWW-RobotRules-6.02 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Net-LibIDN-0.12 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-autodie-2.16 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Env-1.04 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Net-SSLeay-1.55 drwxr-xr-x 6 root root 4.0K Sep 26 2017 perl-IO-Socket-SSL-1.94 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Net-HTTP-6.06 drwxr-xr-x 2 root root 4.0K Sep 26 2017 patch-2.7.1 drwxr-xr-x 2 root root 4.0K Sep 26 2017 qt-settings-19 drwxr-xr-x 2 root root 4.0K Sep 26 2017 qt-4.8.5 drwxr-xr-x 5 root root 4.0K Sep 26 2017 qt4 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Sys-Syslog-0.33 drwxr-xr-x. 2 root root 4.0K Sep 26 2017 libpng12-1.2.50 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Locale-Codes-3.26 drwxr-xr-x 2 root root 4.0K Sep 26 2017 pyparsing-1.5.6 drwxr-xr-x 2 root root 4.0K Sep 26 2017 systemtap-sdt-devel-3.0 drwxr-xr-x 2 root root 4.0K Sep 26 2017 m4-1.4.16 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-ExtUtils-Manifest-1.61 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-ExtUtils-MakeMaker-6.68 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-ExtUtils-ParseXS-3.18 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-devel-5.16.3 drwxr-xr-x 2 root root 4.0K Sep 26 2017 mailcap-2.1.41 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-LWP-MediaTypes-6.02 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-Module-Pluggable-4.8 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-B-Lint-1.17 drwxr-xr-x 2 root root 4.0K Sep 26 2017 redhat-lsb-core-4.1 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-IO-HTML-1.00 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTTP-Message-6.06 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-HTML-Parser-3.71 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTTP-Cookies-6.01 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTTP-Daemon-6.01 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-HTTP-Negotiate-6.01 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-libwww-perl-6.05 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-XML-SAX-0.99 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-XML-LibXML-2.0018 drwxr-xr-x 2 root root 4.0K Sep 26 2017 tree-1.6.0 drwxr-xr-x 3 root root 4.0K Sep 26 2017 perl-Error-0.17020 drwxr-xr-x 2 root root 4.0K Sep 26 2017 perl-TermReadKey-2.30 drwxr-xr-x 6 root root 20K Sep 26 2017 git-1.8.3.1 drwxr-xr-x 2 root root 4.0K Sep 26 2017 apr-1.4.8 drwxr-xr-x 2 root root 4.0K Sep 26 2017 apr-util-1.5.2 drwxr-xr-x 2 root root 4.0K Sep 26 2017 subversion-libs-1.7.14 drwxr-xr-x 7 root root 4.0K Sep 26 2017 subversion-1.7.14 drwxr-xr-x 2 root root 4.0K Sep 27 2017 libice3.7-c++-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 ice-utils-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 libicestorm3.7-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 icegrid-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 icebox-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 icepatch2-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 icebridge-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 glacier2-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 python-ice-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 ice-slice-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 ice-compilers-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 libice-c++-devel-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 icegridgui-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 libzip-0.10.1 drwxr-xr-x 2 root root 4.0K Sep 27 2017 php-common-5.4.16 drwxr-xr-x 2 root root 4.0K Sep 27 2017 php-ice-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 ice-all-runtime-3.7.0 drwxr-xr-x 2 root root 4.0K Sep 27 2017 ice-all-devel-3.7.0 drwxr-xr-x 5 root root 4.0K Sep 30 2017 cmake-2.8.12.2 drwxr-xr-x 2 root root 4.0K Sep 30 2017 autoconf-2.69 drwxr-xr-x 3 root root 4.0K Sep 30 2017 perl-Thread-Queue-3.02 drwxr-xr-x 2 root root 4.0K Sep 30 2017 automake-1.13.4 drwxr-xr-x 2 root root 4.0K Sep 30 2017 dwz-0.11 drwxr-xr-x 2 root root 4.0K Sep 30 2017 systemtap-devel-3.0 drwxr-xr-x 2 root root 4.0K Sep 30 2017 redhat-rpm-config-9.1.0 drwxr-xr-x 3 root root 4.0K Sep 30 2017 perl-XML-Parser-2.41 drwxr-xr-x 2 root root 4.0K Sep 30 2017 mokutil-0.9 drwxr-xr-x 3 root root 4.0K Sep 30 2017 systemtap-client-3.0 drwxr-xr-x 2 root root 4.0K Sep 30 2017 intltool-0.50.2 drwxr-xr-x 2 root root 4.0K Sep 30 2017 libtool-2.4.2 drwxr-xr-x 2 root root 4.0K Sep 30 2017 diffstat-1.57 drwxr-xr-x 2 root root 4.0K Sep 30 2017 patchutils-0.3.3 drwxr-xr-x 2 root root 4.0K Sep 30 2017 cscope-15.8 drwxr-xr-x 2 root root 4.0K Sep 30 2017 flex-2.5.37 drwxr-xr-x 2 root root 4.0K Sep 30 2017 indent-2.2.11 drwxr-xr-x 2 root root 4.0K Sep 30 2017 swig-2.0.10 drwxr-xr-x 2 root root 4.0K Sep 30 2017 rcs-5.9.0 drwxr-xr-x 4 root root 4.0K Sep 30 2017 doxygen-1.8.5 drwxr-xr-x 2 root root 4.0K Sep 30 2017 byacc-1.9.20130304 drwxr-xr-x 2 root root 4.0K Sep 30 2017 bison-2.7 drwxr-xr-x 2 root root 4.0K Sep 30 2017 ctags-5.8 drwxr-xr-x 3 root root 4.0K Oct 9 2017 pcre-devel-8.32 drwxr-xr-x 2 root root 4.0K Oct 9 2017 zlib-devel-1.2.7 drwxr-xr-x 2 root root 4.0K Oct 20 2017 kubernetes-client-1.5.2 drwxr-xr-x 2 root root 4.0K Oct 20 2017 kubernetes-master-1.5.2 drwxr-xr-x 2 root root 4.0K Oct 20 2017 container-selinux-2.21 drwxr-xr-x 2 root root 4.0K Oct 20 2017 libnetfilter_conntrack-1.0.6 drwxr-xr-x 2 root root 4.0K Oct 20 2017 socat-1.7.3.2 drwxr-xr-x 2 root root 4.0K Oct 20 2017 libnetfilter_cthelper-1.0.0 drwxr-xr-x 2 root root 4.0K Oct 20 2017 libnetfilter_queue-1.0.2 drwxr-xr-x 2 root root 4.0K Oct 20 2017 container-storage-setup-0.6.0 drwxr-xr-x 2 root root 4.0K Oct 20 2017 libnetfilter_cttimeout-1.0.0 drwxr-xr-x 3 root root 4.0K Oct 20 2017 conntrack-tools-1.4.4 drwxr-xr-x 2 root root 4.0K Oct 20 2017 oci-systemd-hook-0.1.12 drwxr-xr-x 2 root root 4.0K Oct 20 2017 oci-umount-1.12.6 drwxr-xr-x 2 root root 4.0K Oct 20 2017 oci-register-machine-0 drwxr-xr-x 2 root root 4.0K Oct 20 2017 docker-common-1.12.6 drwxr-xr-x 2 root root 4.0K Oct 20 2017 docker-1.12.6 drwxr-xr-x 2 root root 4.0K Oct 20 2017 kubernetes-node-1.5.2 drwxr-xr-x 2 root root 4.0K Oct 20 2017 etcd-3.2.5 drwxr-xr-x 2 root root 4.0K Dec 28 2017 lshw-B.02.18 drwxr-xr-x 2 root root 4.0K Feb 2 2018 openssl-1.0.2k drwxr-xr-x 3 root root 4.0K Feb 2 2018 MySQL-python-1.2.5 drwxr-xr-x 2 root root 4.0K Feb 2 2018 openssl-devel-1.0.2k drwxr-xr-x 2 root root 4.0K Feb 2 2018 httpd-tools-2.4.6 drwxr-xr-x 2 root root 4.0K Feb 2 2018 httpd-2.4.6 drwxr-xr-x 2 root root 4.0K Feb 2 2018 postgresql-libs-9.2.23 drwxr-xr-x 2 root root 4.0K Feb 2 2018 python-psycopg2-2.5.1 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 libgcc-4.8.5 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 libgomp-4.8.5 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 libquadmath-4.8.5 drwxr-xr-x 2 root root 4.0K Apr 23 2018 gettext-0.19.8.1 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 libstdc++-devel-4.8.5 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 perl-5.16.3 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 gcc-4.8.5 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 libquadmath-devel-4.8.5 drwxr-xr-x 2 root root 4.0K Apr 23 2018 golang-1.8.3 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 gcc-gfortran-4.8.5 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 gcc-c++-4.8.5 drwxr-xr-x 3 root root 4.0K Apr 23 2018 gettext-devel-0.19.8.1 drwxr-xr-x 2 root root 4.0K Apr 23 2018 libcurl-devel-7.29.0 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 curl-7.29.0 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 cpio-2.11 drwxr-xr-x. 2 root root 4.0K Apr 23 2018 wget-1.14 drwxr-xr-x 4 root root 4.0K Apr 23 2018 expat-devel-2.1.0 drwxr-xr-x 2 root root 4.0K Apr 23 2018 mercurial-2.6.2 drwxr-xr-x. 2 root root 4.0K Jul 24 2018 ntpdate-4.2.6p5 drwxr-xr-x. 2 root root 4.0K Jul 24 2018 ntp-4.2.6p5 drwxr-xr-x 2 root root 4.0K Jul 24 2018 mysql-community-common-5.7.22 drwxr-xr-x 2 root root 4.0K Jul 24 2018 mysql-community-libs-5.7.22 drwxr-xr-x 2 root root 4.0K Jul 24 2018 mysql-community-client-5.7.22 drwxr-xr-x 2 root root 4.0K Jul 24 2018 mysql-community-server-5.7.22 drwxr-xr-x 2 root root 4.0K Jul 24 2018 mysql-community-libs-compat-5.7.22 drwxr-xr-x 2 root root 4.0K Jul 30 2018 telnet-0.17 drwxr-xr-x 2 root root 4.0K Jul 30 2018 mysql-community-devel-5.7.23 drwxr-xr-x 3 root root 4.0K Jul 30 2018 rsync-3.1.2 drwxr-xr-x 2 root root 4.0K Jul 8 13:28 python3-setuptools-39.2.0 drwxr-xr-x 2 root root 4.0K Jul 8 13:28 python3-libs-3.6.8 drwxr-xr-x 2 root root 4.0K Jul 8 13:28 python3-3.6.8 drwxr-xr-x 2 root root 4.0K Jul 8 13:28 python3-pip-9.0.3 drwxr-xr-x. 2 root root 4.0K Jul 8 13:29 python-libs-2.7.5 drwxr-xr-x. 2 root root 4.0K Jul 8 13:29 python-2.7.5 drwxr-xr-x 2 root root 4.0K Jul 8 13:29 python3-devel-3.6.8 drwxr-xr-x 2 root root 4.0K Jul 8 13:29 python-devel-2.7.5 drwxr-xr-x 2 root root 4.0K Jul 14 11:21 epel-release-7 drwxr-xr-x 2 root root 4.0K Jul 14 11:22 oniguruma-6.8.2 drwxr-xr-x 2 root root 4.0K Jul 14 11:22 jq drwxr-xr-x 2 root root 4.0K Oct 28 17:35 pssh-2.3.1 drwxr-xr-x 3 root root 4.0K Oct 28 17:38 krb5-libs-1.15.1 drwxr-xr-x 2 root root 4.0K Oct 28 17:38 openldap-2.4.44 drwxr-xr-x 2 root root 4.0K Oct 28 17:38 krb5-server-1.15.1 drwxr-xr-x. 2 root root 4.0K Oct 29 14:00 cyrus-sasl-lib-2.1.26 drwxr-xr-x 2 root root 4.0K Oct 29 14:00 libdb4-4.8.30 drwxr-xr-x. 2 root root 4.0K Oct 29 14:00 cyrus-sasl-2.1.26 drwxr-xr-x 2 root root 4.0K Oct 29 14:00 cyrus-sasl-devel-2.1.26 drwxr-xr-x 2 root root 4.0K Oct 29 14:00 krb5-server-ldap-1.15.1 drwxr-xr-x 2 root root 4.0K Oct 29 14:01 compat-openldap-2.3.43 drwxr-xr-x 4 root root 4.0K Oct 29 14:01 openldap-devel-2.4.44 drwxr-xr-x 2 root root 4.0K Oct 29 14:01 openldap-servers-2.4.44 [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# ls -lhtr /usr/share/doc/ | grep krb5 drwxr-xr-x 3 root root 4.0K Oct 28 17:38 krb5-libs-1.15.1 drwxr-xr-x 2 root root 4.0K Oct 28 17:38 krb5-server-1.15.1 drwxr-xr-x 2 root root 4.0K Oct 29 14:00 krb5-server-ldap-1.15.1 [root@retail1 ldap]# KERBEROS_LDAP_VERSION=1.15.1 [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# ls -lhtr /usr/share/doc/krb5-server-ldap-${KERBEROS_LDAP_VERSION}/kerberos.schema -rw-r--r-- 1 root root 25K Mar 3 2017 /usr/share/doc/krb5-server-ldap-1.15.1/kerberos.schema [root@retail1 ldap]# ls -lhtr /etc/openldap/ total 24K -rw-r--r-- 1 root root 363 Jan 30 2019 ldap.conf -rw-r--r-- 1 root root 121 Jan 30 2019 check_password.conf drwxr-xr-x 2 root root 4.0K Oct 29 14:01 schema drwxr-xr-x. 2 root root 4.0K Oct 29 14:01 certs drwxr-x--- 3 ldap ldap 4.0K Oct 29 14:01 slapd.d drwxr-x--- 3 root root 4.0K Oct 29 14:02 slapd.d.bak [root@retail1 ldap]# ls -lhtr /etc/openldap/schema total 312K -r--r--r-- 1 root root 6.8K Jan 30 2019 pmi.ldif -r--r--r-- 1 root root 3.3K Jan 30 2019 openldap.ldif -r--r--r-- 1 root root 6.7K Jan 30 2019 nis.ldif -r--r--r-- 1 root root 2.1K Jan 30 2019 misc.ldif -r--r--r-- 1 root root 3.0K Jan 30 2019 java.ldif -r--r--r-- 1 root root 3.4K Jan 30 2019 inetorgperson.ldif -r--r--r-- 1 root root 3.3K Jan 30 2019 dyngroup.ldif -r--r--r-- 1 root root 4.8K Jan 30 2019 duaconf.ldif -r--r--r-- 1 root root 12K Jan 30 2019 cosine.ldif -r--r--r-- 1 root root 21K Jan 30 2019 core.ldif -r--r--r-- 1 root root 1.9K Jan 30 2019 corba.ldif -r--r--r-- 1 root root 2.0K Jan 30 2019 collective.ldif -r--r--r-- 1 root root 21K Jan 30 2019 ppolicy.schema -r--r--r-- 1 root root 4.5K Jan 30 2019 ppolicy.ldif -r--r--r-- 1 root root 20K Jan 30 2019 pmi.schema -r--r--r-- 1 root root 1.5K Jan 30 2019 openldap.schema -r--r--r-- 1 root root 7.5K Jan 30 2019 nis.schema -r--r--r-- 1 root root 2.4K Jan 30 2019 misc.schema -r--r--r-- 1 root root 14K Jan 30 2019 java.schema -r--r--r-- 1 root root 6.2K Jan 30 2019 inetorgperson.schema -r--r--r-- 1 root root 3.3K Jan 30 2019 dyngroup.schema -r--r--r-- 1 root root 11K Jan 30 2019 duaconf.schema -r--r--r-- 1 root root 73K Jan 30 2019 cosine.schema -r--r--r-- 1 root root 21K Jan 30 2019 core.schema -r--r--r-- 1 root root 7.9K Jan 30 2019 corba.schema -r--r--r-- 1 root root 6.1K Jan 30 2019 collective.schema [root@retail1 ldap]# vim /usr/share/doc/krb5-server-ldap-1.15.1/kerberos.schema [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# cp /usr/share/doc/krb5-server-ldap-${KERBEROS_LDAP_VERSION}/kerberos.schema /etc/openldap/schema/ [root@retail1 ldap]# cat /etc/openldap/slapd.conf cat: /etc/openldap/slapd.conf: No such file or directory [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# touch /etc/openldap/slapd.conf [root@retail1 ldap]# vim /etc/openldap/slapd.conf [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# ls /etc/openldap/slapd.d cn=config cn=config.ldif [root@retail1 ldap]# slap slapacl slapadd slapauth slapcat slapd slapdn slapindex slappasswd slapschema slaptest [root@retail1 ldap]# slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d config file testing succeeded [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# chown -R ldap:ldap /etc/openldap/slapd.d [root@retail1 ldap]# chmod -R 700 /etc/openldap/slapd.d [root@retail1 ldap]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# systemctl start slapd Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details. [root@retail1 ldap]# [root@retail1 ldap]# [root@retail1 ldap]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-10-29 14:28:19 CST; 2s ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 17633 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=1/FAILURE) Process: 17614 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)

Oct 29 14:28:19 retail1 slapd[17633]: ldapdb_canonuser_plug_init() failed in sasl_canonuser_add_plugin(): invalid parameter supplied Oct 29 14:28:19 retail1 slapd[17633]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:28:19 retail1 slapd[17633]: config error processing cn={1}core,cn=schema,cn=config: olcAttributeTypes: Duplicate attributeType: "2.5.4.2" Oct 29 14:28:19 retail1 slapd[17633]: DIGEST-MD5 common mech free Oct 29 14:28:19 retail1 slapd[17633]: slapd stopped. Oct 29 14:28:19 retail1 slapd[17633]: connections_destroy: nothing to destroy. Oct 29 14:28:19 retail1 systemd[1]: slapd.service: control process exited, code=exited status=1 Oct 29 14:28:19 retail1 systemd[1]: Failed to start OpenLDAP Server Daemon. Oct 29 14:28:19 retail1 systemd[1]: Unit slapd.service entered failed state. Oct 29 14:28:19 retail1 systemd[1]: slapd.service failed. [root@retail1 ldap]# ls -lhtr /etc/openldap/slapd.d total 8.0K -rwx------ 1 ldap ldap 589 Oct 29 14:01 cn=config.ldif drwx------ 3 ldap ldap 4.0K Oct 29 14:01 cn=config [root@retail1 ldap]# ls -lhtr /etc/openldap/slapd.d/cn=config/ total 24K -rwx------ 1 ldap ldap 378 Oct 29 14:01 cn=schema.ldif -rwx------ 1 ldap ldap 609 Oct 29 14:01 olcDatabase={2}hdb.ldif -rwx------ 1 ldap ldap 562 Oct 29 14:01 olcDatabase={1}monitor.ldif -rwx------ 1 ldap ldap 443 Oct 29 14:01 olcDatabase={-1}frontend.ldif -rwx------ 1 ldap ldap 513 Oct 29 14:01 olcDatabase={0}config.ldif drwx------ 2 ldap ldap 4.0K Oct 29 14:21 cn=schema [root@retail1 ldap]# ls -lhtr /etc/openldap/slapd.d/cn=config/cn=schema total 104K -rwx------ 1 ldap ldap 16K Oct 29 14:01 cn={0}core.ldif -rwx------ 1 ldap ldap 16K Oct 29 14:21 cn={1}core.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={0}corba.ldif -rwx------ 1 ldap ldap 2.6K Oct 29 14:21 cn={6}java.ldif -rwx------ 1 ldap ldap 2.8K Oct 29 14:21 cn={5}inetorgperson.ldif -rwx------ 1 ldap ldap 1.7K Oct 29 14:21 cn={4}dyngroup.ldif -rwx------ 1 ldap ldap 4.4K Oct 29 14:21 cn={3}duaconf.ldif -rwx------ 1 ldap ldap 12K Oct 29 14:21 cn={2}cosine.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={9}openldap.ldif -rwx------ 1 ldap ldap 6.4K Oct 29 14:21 cn={8}nis.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={7}misc.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={11}collective.ldif -rwx------ 1 ldap ldap 3.8K Oct 29 14:21 cn={10}ppolicy.ldif -rwx------ 1 ldap ldap 11K Oct 29 14:21 cn={12}kerberos.ldif [root@retail1 ldap]# cd /etc/openldap/slapd.d/cn=config/cn=schema [root@retail1 cn=schema]# ls cn={0}corba.ldif cn={10}ppolicy.ldif cn={12}kerberos.ldif cn={2}cosine.ldif cn={4}dyngroup.ldif cn={6}java.ldif cn={8}nis.ldif cn={0}core.ldif cn={11}collective.ldif cn={1}core.ldif cn={3}duaconf.ldif cn={5}inetorgperson.ldif cn={7}misc.ldif cn={9}openldap.ldif [root@retail1 cn=schema]# ls -lhtr total 104K -rwx------ 1 ldap ldap 16K Oct 29 14:01 cn={0}core.ldif -rwx------ 1 ldap ldap 16K Oct 29 14:21 cn={1}core.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={0}corba.ldif -rwx------ 1 ldap ldap 2.6K Oct 29 14:21 cn={6}java.ldif -rwx------ 1 ldap ldap 2.8K Oct 29 14:21 cn={5}inetorgperson.ldif -rwx------ 1 ldap ldap 1.7K Oct 29 14:21 cn={4}dyngroup.ldif -rwx------ 1 ldap ldap 4.4K Oct 29 14:21 cn={3}duaconf.ldif -rwx------ 1 ldap ldap 12K Oct 29 14:21 cn={2}cosine.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={9}openldap.ldif -rwx------ 1 ldap ldap 6.4K Oct 29 14:21 cn={8}nis.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={7}misc.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={11}collective.ldif -rwx------ 1 ldap ldap 3.8K Oct 29 14:21 cn={10}ppolicy.ldif -rwx------ 1 ldap ldap 11K Oct 29 14:21 cn={12}kerberos.ldif [root@retail1 cn=schema]# cat cn={0}core.ldif

dn: cn={0}core objectClass: olcSchemaConfig cn: {0}core olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: k nowledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115. 121.1.15{32768} ) olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family) name(s) for which the entity is known by' SUP name ) olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial nu mber of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} ) olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC4519: tw o-letter ISO-3166 country code' SUP name SYNTAX 1.3.6.1.4.1.1466.115.121.1. 11 SINGLE-VALUE ) olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: l ocality which this object resides in' SUP name ) olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RF C2256: state or province which this object resides in' SUP name ) olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2 256: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgn oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC22 56: organization this object belongs to' SUP name ) olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC2256: organizational unit this object belongs to' SUP name ) olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associate d with the entity' SUP name ) olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search g uide, deprecated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1. 25 ) olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: bus iness category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S YNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ) olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal co de' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6. 1.4.1.1466.115.121.1.15{40} ) olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post O ffice Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} ) olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RF C2256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseI gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Tele phone Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstring sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} ) olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Nu mber' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ) olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC 2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ) olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.11 5.121.1.22 ) olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Ad dress' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNT AX 1.3.6.1.4.1.1466.115.121.1.36{15} ) olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC22 56: international ISDN number' EQUALITY numericStringMatch SUBSTR numericSt ringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ) olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: re gistered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121. 1.41 ) olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destination indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} ) olcAttributeTypes: {24}( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC22 56: preferred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE- VALUE ) olcAttributeTypes: {25}( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentation address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1. 1466.115.121.1.43 SINGLE-VALUE ) olcAttributeTypes: {26}( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'R FC2256: supported application context' EQUALITY objectIdentifierMatch SYNTA X 1.3.6.1.4.1.1466.115.121.1.38 ) olcAttributeTypes: {27}( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a g roup' SUP distinguishedName ) olcAttributeTypes: {28}( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' SUP distinguishedName ) olcAttributeTypes: {29}( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupan t of role' SUP distinguishedName ) olcAttributeTypes: {30}( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.50 9 user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3. 6.1.4.1.1466.115.121.1.8 ) olcAttributeTypes: {31}( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1. 4.1.1466.115.121.1.8 ) olcAttributeTypes: {32}( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC22 56: X.509 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.1 15.121.1.9 ) olcAttributeTypes: {33}( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC 2256: X.509 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.14 66.115.121.1.9 ) olcAttributeTypes: {34}( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cross certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121 .1.10 ) olcAttributeTypes: {35}( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: f irst name(s) for which the entity is known by' SUP name ) olcAttributeTypes: {36}( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or all of names, but not the surname(s).' SUP name ) olcAttributeTypes: {37}( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name qualifier indicating a generation' SUP name ) olcAttributeTypes: {38}( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 unique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.1 15.121.1.6 ) olcAttributeTypes: {39}( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN quali fier' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR case IgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ) olcAttributeTypes: {40}( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 ) olcAttributeTypes: {41}( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1. 1466.115.121.1.42 ) olcAttributeTypes: {42}( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.1 21.1.34 ) olcAttributeTypes: {43}( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: hous e identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYN TAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ) olcAttributeTypes: {44}( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 ) olcAttributeTypes: {45}( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ) olcAttributeTypes: {46}( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name ) olcAttributeTypes: {47}( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudon ym for the object' SUP name ) olcAttributeTypes: {48}( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mail box' ) DESC 'RFC1274: RFC822 Mailbox' EQUALITY caseIgnoreIA5Match SUBST R caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ) olcAttributeTypes: {49}( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainCompo nent' ) DESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match S UBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SIN GLE-VALUE ) olcAttributeTypes: {50}( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match S UBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {51}( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9email' ) DESC 'RFC3280: legacy attribute for email addresses in DNs' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3. 6.1.4.1.1466.115.121.1.26{128} ) olcObjectClasses: {0}( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) ) olcObjectClasses: {1}( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SU P top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ descriptio n ) ) olcObjectClasses: {2}( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organiz ation' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicato r $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ tel ephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ) olcObjectClasses: {3}( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an o rganizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchG uide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ desti nationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalId entifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNu mber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDelive ryOfficeName $ st $ l $ description ) ) olcObjectClasses: {4}( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP to p STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAls o $ description ) ) olcObjectClasses: {5}( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organizational person' SUP person STRUCTURAL MAY ( title $ x121Address $ r egisteredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNu mber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumbe r $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ posta lAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) ) olcObjectClasses: {6}( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an o rganizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ register edAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ fac simileTelephoneNumber $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOffic eName $ ou $ st $ l $ description ) ) olcObjectClasses: {7}( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategor y $ seeAlso $ owner $ ou $ o $ description ) ) olcObjectClasses: {8}( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an r esidential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x1 21Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMet hod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internati onaliSDNNumber $ facsimileTelephoneNumber $ preferredDeliveryMethod $ stree t $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l ) ) olcObjectClasses: {9}( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an application process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ de scription ) ) olcObjectClasses: {10}( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an application entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MA Y ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) ) olcObjectClasses: {11}( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory syste m agent (a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformati on ) olcObjectClasses: {12}( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) ) olcObjectClasses: {13}( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC22 56: a strong authentication user' SUP top AUXILIARY MUST userCertificate ) olcObjectClasses: {14}( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256 : a certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certificateRevocationList $ cACertificate ) MAY crossCertificatePair ) olcObjectClasses: {15}( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ de scription ) ) olcObjectClasses: {16}( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC225 6: a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) ) olcObjectClasses: {17}( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP cert ificationAuthority AUXILIARY MAY ( deltaRevocationList ) ) olcObjectClasses: {18}( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTU RAL MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $ deltaRevocationList ) ) olcObjectClasses: {19}( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdNam e ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Add ress $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationali SDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ) olcObjectClasses: {20}( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' S UP top AUXILIARY MAY userCertificate ) olcObjectClasses: {21}( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authority' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRe vocationList $ cACertificate $ crossCertificatePair ) ) olcObjectClasses: {22}( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SU P top AUXILIARY MAY deltaRevocationList ) olcObjectClasses: {23}( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'R FC2079: object that contains the URI attribute type' MAY ( labeledURI ) SUP top AUXILIARY ) olcObjectClasses: {24}( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObjec t' DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPasswo rd ) olcObjectClasses: {25}( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain component object' SUP top AUXILIARY MUST dc ) olcObjectClasses: {26}( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid ob ject' SUP top AUXILIARY MUST uid ) structuralObjectClass: olcSchemaConfig entryUUID: e2547a14-adf7-103a-85b1-1fad7229baee creatorsName: cn=config createTimestamp: 20201029060108Z entryCSN: 20201029060108.993244Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20201029060108Z [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# ls cn={0}corba.ldif cn={10}ppolicy.ldif cn={12}kerberos.ldif cn={2}cosine.ldif cn={4}dyngroup.ldif cn={6}java.ldif cn={8}nis.ldif cn={0}core.ldif cn={11}collective.ldif cn={1}core.ldif cn={3}duaconf.ldif cn={5}inetorgperson.ldif cn={7}misc.ldif cn={9}openldap.ldif [root@retail1 cn=schema]# ls -lhtr total 104K -rwx------ 1 ldap ldap 16K Oct 29 14:01 cn={0}core.ldif -rwx------ 1 ldap ldap 16K Oct 29 14:21 cn={1}core.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={0}corba.ldif -rwx------ 1 ldap ldap 2.6K Oct 29 14:21 cn={6}java.ldif -rwx------ 1 ldap ldap 2.8K Oct 29 14:21 cn={5}inetorgperson.ldif -rwx------ 1 ldap ldap 1.7K Oct 29 14:21 cn={4}dyngroup.ldif -rwx------ 1 ldap ldap 4.4K Oct 29 14:21 cn={3}duaconf.ldif -rwx------ 1 ldap ldap 12K Oct 29 14:21 cn={2}cosine.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={9}openldap.ldif -rwx------ 1 ldap ldap 6.4K Oct 29 14:21 cn={8}nis.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={7}misc.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={11}collective.ldif -rwx------ 1 ldap ldap 3.8K Oct 29 14:21 cn={10}ppolicy.ldif -rwx------ 1 ldap ldap 11K Oct 29 14:21 cn={12}kerberos.ldif [root@retail1 cn=schema]# mv cn={0}core.ldif "cn={0}core.ldif.bak" [root@retail1 cn=schema]# ls -lhtr total 104K -rwx------ 1 ldap ldap 16K Oct 29 14:01 cn={0}core.ldif.bak -rwx------ 1 ldap ldap 16K Oct 29 14:21 cn={1}core.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={0}corba.ldif -rwx------ 1 ldap ldap 2.6K Oct 29 14:21 cn={6}java.ldif -rwx------ 1 ldap ldap 2.8K Oct 29 14:21 cn={5}inetorgperson.ldif -rwx------ 1 ldap ldap 1.7K Oct 29 14:21 cn={4}dyngroup.ldif -rwx------ 1 ldap ldap 4.4K Oct 29 14:21 cn={3}duaconf.ldif -rwx------ 1 ldap ldap 12K Oct 29 14:21 cn={2}cosine.ldif -rwx------ 1 ldap ldap 1.3K Oct 29 14:21 cn={9}openldap.ldif -rwx------ 1 ldap ldap 6.4K Oct 29 14:21 cn={8}nis.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={7}misc.ldif -rwx------ 1 ldap ldap 1.5K Oct 29 14:21 cn={11}collective.ldif -rwx------ 1 ldap ldap 3.8K Oct 29 14:21 cn={10}ppolicy.ldif -rwx------ 1 ldap ldap 11K Oct 29 14:21 cn={12}kerberos.ldif [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-10-29 14:28:19 CST; 11min ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 17633 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=1/FAILURE) Process: 17614 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)

Oct 29 14:28:19 retail1 slapd[17633]: ldapdb_canonuser_plug_init() failed in sasl_canonuser_add_plugin(): invalid parameter supplied Oct 29 14:28:19 retail1 slapd[17633]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:28:19 retail1 slapd[17633]: config error processing cn={1}core,cn=schema,cn=config: olcAttributeTypes: Duplicate attributeType: "2.5.4.2" Oct 29 14:28:19 retail1 slapd[17633]: DIGEST-MD5 common mech free Oct 29 14:28:19 retail1 slapd[17633]: slapd stopped. Oct 29 14:28:19 retail1 slapd[17633]: connections_destroy: nothing to destroy. Oct 29 14:28:19 retail1 systemd[1]: slapd.service: control process exited, code=exited status=1 Oct 29 14:28:19 retail1 systemd[1]: Failed to start OpenLDAP Server Daemon. Oct 29 14:28:19 retail1 systemd[1]: Unit slapd.service entered failed state. Oct 29 14:28:19 retail1 systemd[1]: slapd.service failed. [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl stop slapd [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-10-29 14:28:19 CST; 11min ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 17633 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=1/FAILURE) Process: 17614 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)

Oct 29 14:28:19 retail1 slapd[17633]: ldapdb_canonuser_plug_init() failed in sasl_canonuser_add_plugin(): invalid parameter supplied Oct 29 14:28:19 retail1 slapd[17633]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:28:19 retail1 slapd[17633]: config error processing cn={1}core,cn=schema,cn=config: olcAttributeTypes: Duplicate attributeType: "2.5.4.2" Oct 29 14:28:19 retail1 slapd[17633]: DIGEST-MD5 common mech free Oct 29 14:28:19 retail1 slapd[17633]: slapd stopped. Oct 29 14:28:19 retail1 slapd[17633]: connections_destroy: nothing to destroy. Oct 29 14:28:19 retail1 systemd[1]: slapd.service: control process exited, code=exited status=1 Oct 29 14:28:19 retail1 systemd[1]: Failed to start OpenLDAP Server Daemon. Oct 29 14:28:19 retail1 systemd[1]: Unit slapd.service entered failed state. Oct 29 14:28:19 retail1 systemd[1]: slapd.service failed. [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl start slapd [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: active (running) since Thu 2020-10-29 14:40:21 CST; 2s ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 20337 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=0/SUCCESS) Process: 20319 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS) Main PID: 20338 (slapd) Memory: 32.9M CGroup: /system.slice/slapd.service └─20338 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///

Oct 29 14:40:21 retail1 slapd[20337]: sql_select option missing Oct 29 14:40:21 retail1 slapd[20337]: auxpropfunc error no mechanism available Oct 29 14:40:21 retail1 slapd[20337]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql Oct 29 14:40:21 retail1 slapd[20337]: auxpropfunc error invalid parameter supplied Oct 29 14:40:21 retail1 slapd[20337]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: ldapdb Oct 29 14:40:21 retail1 slapd[20337]: ldapdb_canonuser_plug_init() failed in sasl_canonuser_add_plugin(): invalid parameter supplied Oct 29 14:40:21 retail1 slapd[20337]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:40:21 retail1 slapd[20337]: tlsmc_get_pin: INFO: Please note the extracted key file will not be protected with a PIN any more, however it w...rmissions. Oct 29 14:40:21 retail1 slapd[20338]: slapd starting Oct 29 14:40:21 retail1 systemd[1]: Started OpenLDAP Server Daemon. Hint: Some lines were ellipsized, use -l to show in full. [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl stop slapd [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html

Oct 29 14:40:21 retail1 slapd[20337]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:40:21 retail1 slapd[20337]: tlsmc_get_pin: INFO: Please note the extracted key file will not be protected with a PIN any more, however it w...rmissions. Oct 29 14:40:21 retail1 slapd[20338]: slapd starting Oct 29 14:40:21 retail1 systemd[1]: Started OpenLDAP Server Daemon. Oct 29 14:40:40 retail1 systemd[1]: Stopping OpenLDAP Server Daemon... Oct 29 14:40:40 retail1 slapd[20338]: daemon: shutdown requested and initiated. Oct 29 14:40:40 retail1 slapd[20338]: slapd shutdown: waiting for 0 operations/tasks to finish Oct 29 14:40:40 retail1 slapd[20338]: DIGEST-MD5 common mech free Oct 29 14:40:40 retail1 slapd[20338]: slapd stopped. Oct 29 14:40:40 retail1 systemd[1]: Stopped OpenLDAP Server Daemon. Hint: Some lines were ellipsized, use -l to show in full. [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl start slapd [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; disabled; vendor preset: disabled) Active: active (running) since Thu 2020-10-29 14:40:49 CST; 2s ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 20484 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=0/SUCCESS) Process: 20452 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS) Main PID: 20486 (slapd) Memory: 10.9M CGroup: /system.slice/slapd.service └─20486 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///

Oct 29 14:40:48 retail1 slapd[20484]: @(#) $OpenLDAP: slapd 2.4.44 (Jan 29 2019 17:42:45) $ [email protected]:/builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44/servers/slapd Oct 29 14:40:48 retail1 slapd[20484]: sql_select option missing Oct 29 14:40:48 retail1 slapd[20484]: auxpropfunc error no mechanism available Oct 29 14:40:48 retail1 slapd[20484]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql Oct 29 14:40:48 retail1 slapd[20484]: auxpropfunc error invalid parameter supplied Oct 29 14:40:48 retail1 slapd[20484]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: ldapdb Oct 29 14:40:48 retail1 slapd[20484]: ldapdb_canonuser_plug_init() failed in sasl_canonuser_add_plugin(): invalid parameter supplied Oct 29 14:40:48 retail1 slapd[20484]: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Oct 29 14:40:49 retail1 slapd[20486]: slapd starting Oct 29 14:40:49 retail1 systemd[1]: Started OpenLDAP Server Daemon. [root@retail1 cn=schema]# vim /var/lib/ldap/DB_CONFIG [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# ps -ef|grep [s]lapd ldap 20486 1 0 14:40 ? 00:00:00 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:/// [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# netstat -antpo | grep :389 tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 20486/slapd off (0.00/0/0) tcp6 0 0 :::389 :::* LISTEN 20486/slapd off (0.00/0/0) [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# systemctl enable slapd Created symlink from /etc/systemd/system/multi-user.target.wants/slapd.service to /usr/lib/systemd/system/slapd.service. [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# kdestory bash: kdestory: command not found... [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# kd kdb5_ldap_util kdb5_util kdump kdumpctl [root@retail1 cn=schema]# ki kill killall killall5 kite-dataset [root@retail1 cn=schema]# ki kill killall killall5 kite-dataset [root@retail1 cn=schema]# kadmin kadmind kadmin.local [root@retail1 cn=schema]# kadmin kadmind kadmin.local [root@retail1 cn=schema]# ls cn={0}corba.ldif cn={10}ppolicy.ldif cn={12}kerberos.ldif cn={2}cosine.ldif cn={4}dyngroup.ldif cn={6}java.ldif cn={8}nis.ldif cn={0}core.ldif.bak cn={11}collective.ldif cn={1}core.ldif cn={3}duaconf.ldif cn={5}inetorgperson.ldif cn={7}misc.ldif cn={9}openldap.ldif [root@retail1 cn=schema]# [root@retail1 cn=schema]# [root@retail1 cn=schema]# cd [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ls airflow cudnn-8.0-linux-x64-v7.tgz Downloads jdk-8u121-linux-x64.rpm mountsdb.sh Pictures Templates anaconda-ks.cfg Desktop info.txt jq-1.5-1.el7.x86_64.rpm Music Public thehost.txt cuda Documents initial-setup-ks.cfg logs NVIDIA_CUDA-8.0_Samples stop_supervisord.sh Videos [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# find /usr/ -name "kinit" [root@retail1 ~]# find / -name "kinit" find: ‘/run/user/42/gvfs’: Permission denied [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin kadmind kadmin.local [root@retail1 ~]# kadmin -q bash: kadmin: command not found... [root@retail1 ~]# [root@retail1 ~]# kdestroy --help kdestroy: invalid option -- '-' kdestroy: invalid option -- 'h' kdestroy: invalid option -- 'e' kdestroy: invalid option -- 'l' kdestroy: invalid option -- 'p' Usage: kdestroy [-A] [-q] [-c cache_name] -A destroy all credential caches in collection -q quiet mode -c specify name of credentials cache [root@retail1 ~]# which kdestory /usr/bin/which: no kdestory in (/usr/local/cuda-8.0/bin:/usr/local/cuda-8.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/root/bin) [root@retail1 ~]# which kdestroy /usr/bin/kdestroy [root@retail1 ~]# kdestroy [root@retail1 ~]# kinit cdh-master/admin Password for cdh-master/[email protected]: [root@retail1 ~]# kadmin Authenticating as principal cdh-master/[email protected] with password. Password for cdh-master/[email protected]: kadmin: help kadmin: Unknown request "help". Type "?" for a request list. kadmin: ? Available kadmin requests:

add_principal, addprinc, ank Add principal delete_principal, delprinc Delete principal modify_principal, modprinc Modify principal rename_principal, renprinc Rename principal change_password, cpw Change password get_principal, getprinc Get principal list_principals, listprincs, get_principals, getprincs List principals add_policy, addpol Add policy modify_policy, modpol Modify policy delete_policy, delpol Delete policy get_policy, getpol Get policy list_policies, listpols, get_policies, getpols List policies get_privs, getprivs Get privileges ktadd, xst Add entry(s) to a keytab ktremove, ktrem Remove entry(s) from a keytab lock Lock database exclusively (use with extreme caution!) unlock Release exclusive database lock purgekeys Purge previously retained old keys from a principal get_strings, getstrs Show string attributes on a principal set_string, setstr Set a string attribute on a principal del_string, delstr Delete a string attribute on a principal list_requests, lr, ? List available requests. quit, exit, q Exit program. kadmin: addprinc ? WARNING: no policy specified for [email protected]; defaulting to no policy Enter password for principal "[email protected]": add_principal: Password read interrupted while reading password for "[email protected]". kadmin: kadmin: kadmin: help addprinc kadmin: Unknown request "help". Type "?" for a request list. kadmin: ? addprinc Available kadmin requests:

add_principal, addprinc, ank Add principal delete_principal, delprinc Delete principal modify_principal, modprinc Modify principal rename_principal, renprinc Rename principal change_password, cpw Change password get_principal, getprinc Get principal list_principals, listprincs, get_principals, getprincs List principals add_policy, addpol Add policy modify_policy, modpol Modify policy delete_policy, delpol Delete policy get_policy, getpol Get policy list_policies, listpols, get_policies, getpols List policies get_privs, getprivs Get privileges ktadd, xst Add entry(s) to a keytab ktremove, ktrem Remove entry(s) from a keytab lock Lock database exclusively (use with extreme caution!) unlock Release exclusive database lock purgekeys Purge previously retained old keys from a principal get_strings, getstrs Show string attributes on a principal set_string, setstr Set a string attribute on a principal del_string, delstr Delete a string attribute on a principal list_requests, lr, ? List available requests. quit, exit, q Exit program. kadmin: kadmin: kadmin: ? addprinc Available kadmin requests:

add_principal, addprinc, ank Add principal delete_principal, delprinc Delete principal modify_principal, modprinc Modify principal rename_principal, renprinc Rename principal change_password, cpw Change password get_principal, getprinc Get principal list_principals, listprincs, get_principals, getprincs List principals add_policy, addpol Add policy modify_policy, modpol Modify policy delete_policy, delpol Delete policy get_policy, getpol Get policy list_policies, listpols, get_policies, getpols List policies get_privs, getprivs Get privileges ktadd, xst Add entry(s) to a keytab ktremove, ktrem Remove entry(s) from a keytab lock Lock database exclusively (use with extreme caution!) unlock Release exclusive database lock purgekeys Purge previously retained old keys from a principal get_strings, getstrs Show string attributes on a principal set_string, setstr Set a string attribute on a principal del_string, delstr Delete a string attribute on a principal list_requests, lr, ? List available requests. quit, exit, q Exit program. kadmin: addprinc -randkey ldap/ldap_admin WARNING: no policy specified for ldap/[email protected]; defaulting to no policy Principal "ldap/[email protected]" created. kadmin: ktadd -k /tmp/ldap_ldap_admin.keytab ldap kadmin: Principal ldap does not exist. kadmin: [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin > addprinc -randkey ldap/ldap_admin kadmin: Missing parameters in krb5.conf required for kadmin client while initializing kadmin interface [root@retail1 ~]# kadmin Authenticating as principal cdh-master/[email protected] with password.

PPassword for cdh-master/[email protected]: kadmin: Incorrect password while initializing kadmin interface [root@retail1 ~]# [root@retail1 ~]# P bash: P: command not found... [root@retail1 ~]# kadmin Authenticating as principal cdh-master/[email protected] with password. Password for cdh-master/[email protected]: kadmin: xst Usage: ktadd [-k[eytab] keytab] [-q] [-e keysaltlist] [-norandkey] [principal | -glob princ-exp] [...] kadmin: kadmin: kadmin: kadmin: kadmin: addprinc usage: add_principal [options] principal options are: [-randkey|-nokey] [-x db_princ_args]* [-expire expdate] [-pwexpire pwexpdate] [-maxlife maxtixlife] [-kvno kvno] [-policy policy] [-clearpolicy] [-pw password] [-maxrenewlife maxrenewlife] [-e keysaltlist] [{+|-}attribute] attributes are: allow_postdated allow_forwardable allow_tgs_req allow_renewable allow_proxiable allow_dup_skey allow_tix requires_preauth requires_hwauth needchange allow_svr password_changing_service ok_as_delegate ok_to_auth_as_delegate no_auth_data_required lockdown_keys

where, [-x db_princ_args]* - any number of database specific arguments. Look at each database documentation for supported arguments kadmin: ktadd Usage: ktadd [-k[eytab] keytab] [-q] [-e keysaltlist] [-norandkey] [principal | -glob princ-exp] [...] kadmin: xst Usage: ktadd [-k[eytab] keytab] [-q] [-e keysaltlist] [-norandkey] [principal | -glob princ-exp] [...] kadmin: ktadd -k /tmp/ldap_ldap_admin.keytab ldap/ldap_admin Entry for principal ldap/ldap_admin with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. Entry for principal ldap/ldap_admin with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. Entry for principal ldap/ldap_admin with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. Entry for principal ldap/ldap_admin with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. Entry for principal ldap/ldap_admin with kvno 2, encryption type des-hmac-sha1 added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. Entry for principal ldap/ldap_admin with kvno 2, encryption type des-cbc-md5 added to keytab WRFILE:/tmp/ldap_ldap_admin.keytab. kadmin: q [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ls -l /etc/openldap/ total 28 drwxr-xr-x. 2 root root 4096 Oct 29 14:01 certs -rw-r--r-- 1 root root 121 Jan 30 2019 check_password.conf -rw-r--r-- 1 root root 363 Jan 30 2019 ldap.conf drwxr-xr-x 2 root root 4096 Oct 29 14:10 schema -rw-r--r-- 1 root root 643 Oct 29 14:12 slapd.conf drwx------ 3 ldap ldap 4096 Oct 29 14:01 slapd.d drwxr-x--- 3 root root 4096 Oct 29 14:02 slapd.d.bak [root@retail1 ~]# cp /tmp/ldap_ldap_admin.keytab /etc/openldap/ [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ls -l /etc/openldap/ total 32 drwxr-xr-x. 2 root root 4096 Oct 29 14:01 certs -rw-r--r-- 1 root root 121 Jan 30 2019 check_password.conf -rw-r--r-- 1 root root 363 Jan 30 2019 ldap.conf -rw------- 1 root root 424 Oct 29 15:47 ldap_ldap_admin.keytab drwxr-xr-x 2 root root 4096 Oct 29 14:10 schema -rw-r--r-- 1 root root 643 Oct 29 14:12 slapd.conf drwx------ 3 ldap ldap 4096 Oct 29 14:01 slapd.d drwxr-x--- 3 root root 4096 Oct 29 14:02 slapd.d.bak [root@retail1 ~]# chown ldap:ldap /etc/openldap/ldap_ldap_admin.keytab [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ls -l /etc/openldap/ total 32 drwxr-xr-x. 2 root root 4096 Oct 29 14:01 certs -rw-r--r-- 1 root root 121 Jan 30 2019 check_password.conf -rw-r--r-- 1 root root 363 Jan 30 2019 ldap.conf -rw------- 1 ldap ldap 424 Oct 29 15:47 ldap_ldap_admin.keytab drwxr-xr-x 2 root root 4096 Oct 29 14:10 schema -rw-r--r-- 1 root root 643 Oct 29 14:12 slapd.conf drwx------ 3 ldap ldap 4096 Oct 29 14:01 slapd.d drwxr-x--- 3 root root 4096 Oct 29 14:02 slapd.d.bak [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# chmod 400 /etc/openldap/ldap_ldap_admin.keytab [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ls -l /etc/openldap/ total 32 drwxr-xr-x. 2 root root 4096 Oct 29 14:01 certs -rw-r--r-- 1 root root 121 Jan 30 2019 check_password.conf -rw-r--r-- 1 root root 363 Jan 30 2019 ldap.conf -r-------- 1 ldap ldap 424 Oct 29 15:47 ldap_ldap_admin.keytab drwxr-xr-x 2 root root 4096 Oct 29 14:10 schema -rw-r--r-- 1 root root 643 Oct 29 14:12 slapd.conf drwx------ 3 ldap ldap 4096 Oct 29 14:01 slapd.d drwxr-x--- 3 root root 4096 Oct 29 14:02 slapd.d.bak [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kinit -k -t /etc/openldap/ldap_ldap_admin.keytab ldap/ldap_admin [root@retail1 ~]# ls /etc/sysconfig/ atd docker firewalld iptables-config krb5kdc netconsole pluto rpcbind saslauthd sysstat authconfig docker-network grub irqbalance ksm network qemu-ga rpc-rquotad selinux sysstat.ioconf cbq docker-storage htcacheclean kadmin libvirtd network-scripts radvd rsyncd slapd virtlockd console docker-storage-setup httpd kdump libvirt-guests nfs raid-check rsyslog smartmontools virtlogd cpupower ebtables-config init kernel man-db ntpd rdisc run-parts sshd wpa_supplicant crond fcoe ip6tables-config kprop modules ntpdate readonly-root samba svnserve [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# cd /etc/sysconfig/ [root@retail1 sysconfig]# [root@retail1 sysconfig]# ls -lhtr total 228K -rw-r--r--. 1 root root 200 Mar 18 2014 man-db -rw-r--r--. 1 root root 0 Jun 10 2014 run-parts -rw-r--r-- 1 root root 138 Aug 13 2015 svnserve -rw-r--r--. 1 root root 186 Sep 9 2015 radvd -rw-------. 1 root root 110 Mar 31 2016 crond -rw-r--r--. 1 root root 903 Nov 5 2016 irqbalance -rw-r--r--. 1 root root 911 Nov 5 2016 qemu-ga -rw-r--r--. 1 root root 395 Nov 5 2016 rpc-rquotad -rw-r--r--. 1 root root 196 Nov 5 2016 rsyslog -rw-r--r--. 1 root root 125 Nov 5 2016 smartmontools -rw-r--r--. 1 root root 644 Nov 5 2016 wpa_supplicant -rw-r--r--. 1 root root 403 Nov 6 2016 atd -rw-r--r--. 1 root root 6.1K Nov 6 2016 sysstat.ioconf -rw-r--r--. 1 root root 474 Nov 6 2016 sysstat -rw-------. 1 root root 1.4K Nov 6 2016 ebtables-config -rw-------. 1 root root 2.0K Nov 6 2016 iptables-config -rw-------. 1 root root 2.0K Nov 6 2016 ip6tables-config -rw-r--r--. 1 root root 73 Nov 6 2016 rpcbind -rw-r--r--. 1 root root 755 Nov 6 2016 readonly-root -rw-r--r--. 1 root root 634 Nov 6 2016 netconsole drwxr-xr-x. 2 root root 4.0K Nov 6 2016 modules -rw-r--r--. 1 root root 798 Nov 6 2016 init drwxr-xr-x. 2 root root 4.0K Nov 6 2016 console -rw-r--r--. 1 root root 15 Nov 7 2016 rdisc -rw-r--r--. 1 root root 1.5K Nov 7 2016 kdump -rw-r--r--. 1 root root 71 Nov 12 2016 pluto -rw-r-----. 1 root root 506 Nov 12 2016 sshd -rw-r--r--. 1 root root 150 Nov 23 2016 cpupower -rw-r--r--. 1 root root 2.9K Jan 18 2017 raid-check -rw-r--r--. 1 root root 428 Jan 18 2017 samba -rw-r--r--. 1 root root 53 Mar 3 2017 virtlogd -rw-r--r--. 1 root root 55 Mar 3 2017 virtlockd -rw-r--r--. 1 root root 2.2K Mar 3 2017 libvirt-guests -rw-r--r--. 1 root root 1.2K Mar 3 2017 libvirtd -rw-r--r--. 1 root root 73 Mar 3 2017 firewalld -rw-r--r--. 1 root root 1.5K Mar 3 2017 nfs -rw-r--r--. 1 root root 169 Apr 13 2017 fcoe -rw-r--r--. 1 root root 168 Apr 19 2017 ksm drwxr-xr-x. 2 root root 4.0K Aug 5 2017 cbq lrwxrwxrwx. 1 root root 17 Aug 5 2017 grub -> /etc/default/grub lrwxrwxrwx. 1 root root 17 Aug 5 2017 selinux -> ../selinux/config -rw-r--r--. 1 root root 180 Aug 5 2017 kernel -rw-r--r--. 1 root root 429 Aug 5 2017 authconfig -rw-r--r--. 1 root root 22 Aug 20 2017 network -rw-r--r-- 1 root root 415 Sep 22 2017 docker-storage -rw-r--r-- 1 root root 56 Sep 22 2017 docker-network -rw-r--r-- 1 root root 714 Sep 22 2017 docker -rw-r--r-- 1 root root 221 Sep 22 2017 docker-storage-setup -rw-r--r-- 1 root root 802 Oct 20 2017 httpd -rw-r--r-- 1 root root 348 Oct 20 2017 htcacheclean -rw-r--r-- 1 root root 429 Apr 11 2018 saslauthd -rw-r--r-- 1 root root 111 Apr 11 2018 ntpdate -rw-r--r-- 1 root root 45 Apr 11 2018 ntpd -rw-r--r-- 1 root root 12 Apr 11 2018 rsyncd -rw-r--r-- 1 root root 527 Jan 30 2019 slapd -rw-r--r-- 1 root root 14 Nov 28 2019 krb5kdc -rw-r--r-- 1 root root 13 Nov 28 2019 kprop -rw-r--r-- 1 root root 14 Nov 28 2019 kadmin drwxr-xr-x. 2 root root 4.0K Jul 6 10:51 network-scripts [root@retail1 sysconfig]# vim slapd [root@retail1 sysconfig]# vim kadmin [root@retail1 sysconfig]# pwd /etc/sysconfig [root@retail1 sysconfig]# [root@retail1 sysconfig]# [root@retail1 sysconfig]# [root@retail1 sysconfig]# [root@retail1 sysconfig]# cd /etc/openldap/slapd.d [root@retail1 slapd.d]# ls cn=config cn=config.ldif [root@retail1 slapd.d]# cd cn=config/ [root@retail1 cn=config]# ls cn=schema cn=schema.ldif olcDatabase={0}config.ldif olcDatabase={-1}frontend.ldif olcDatabase={1}monitor.ldif olcDatabase={2}hdb.ldif [root@retail1 cn=config]# vim olcDatabase={2}hdb.ldif [root@retail1 cn=config]# id ldap uid=1004(ldap) gid=1004(ldap) groups=1004(ldap) [root@retail1 cn=config]# vim /tmp/initial [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif /tmp/initial.ldif: No such file or directory [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial [root@retail1 cn=config]# vim /tmp/initial [root@retail1 cn=config]# mv /tmp/initial /tmp/initial.ldif [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# vim 'olcDatabase={2}hdb.ldif' [root@retail1 cn=config]# cp 'olcDatabase={2}hdb.ldif' 'olcDatabase={2}hdb.ldif.bak' [root@retail1 cn=config]# vim 'olcDatabase={2}hdb.ldif' [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config"

[root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# ls cn=schema olcDatabase={0}config.ldif olcDatabase={1}monitor.ldif olcDatabase={2}hdb.ldif.bak cn=schema.ldif olcDatabase={-1}frontend.ldif olcDatabase={2}hdb.ldif [root@retail1 cn=config]# cat ../cn=config.ldif

dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/openldap/slapd.args olcPidFile: /var/run/openldap/slapd.pid olcTLSCACertificatePath: /etc/openldap/certs olcTLSCertificateFile: "OpenLDAP Server" olcTLSCertificateKeyFile: /etc/openldap/certs/password structuralObjectClass: olcGlobal entryUUID: e2545cdc-adf7-103a-85af-1fad7229baee creatorsName: cn=config createTimestamp: 20201029060108Z olcAuthzRegexp: {0}uid=([^,]*),cn=GSSAPI,cn=auth uid=$1,ou=people,dc=domain, dc=com entryCSN: 20201029084326.416401Z#000000#000#000000 modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth modifyTimestamp: 20201029084326Z [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# cat olcDatabase={2}hdb.ldif

dn: olcDatabase={2}hdb objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {2}hdb olcDbDirectory: /var/lib/ldap olcDbIndex: objectClass eq,pres olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub structuralObjectClass: olcHdbConfig entryUUID: e254c3b6-adf7-103a-85b5-1fad7229baee creatorsName: cn=config createTimestamp: 20201029060108Z olcSuffix: dc=domain,dc=com olcRootDN: uid=ldap,ou=people,dc=domain,dc=com olcRootPW:: ZG9tYWlu olcAccess: {0}to dn.base="" by * read olcAccess: {1}to * by dn="uid=ldap,ou=people,dc=domain,dc=com" write by * re ad entryCSN: 20201029084221.454251Z#000000#000#000000 modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth modifyTimestamp: 20201029084221Z [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldapmodify: modify operation type is missing at line 13, entry "olcDatabase={2}hdb,cn=config" [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 adding new entry "olcDatabase={2}hdb,cn=config" ldap_add: Object class violation (65) additional info: no objectClass attribute

[root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config" ldap_modify: Inappropriate matching (18) additional info: modify/add: olcRootPW: no equality matching rule

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# ldapmodify --help ldapmodify: invalid option -- '-' ldapmodify: unrecognized option -- Add or modify entries from an LDAP server

usage: ldapmodify [options] The list of desired operations are read from stdin or from the file specified by "-f file". Add or modify options: -a add values (default is to replace) -c continuous operation mode (do not stop on errors) -E [!]ext=extparam modify extensions (! indicate s criticality) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -S file write skipped modifications to file' Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ps -ef|grep ldap ldap 40014 1 0 16:07 ? 00:00:00 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:/// root 57149 2589 0 17:25 pts/1 00:00:00 grep --color=auto ldap [root@retail1 cn=config]# netstat -antpo |grep 40014 tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 40014/slapd off (0.00/0/0) tcp6 0 0 :::389 :::* LISTEN 40014/slapd off (0.00/0/0) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -w - ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -w ldapmodify: option requires an argument -- 'w' ldapmodify: unrecognized option -w Add or modify entries from an LDAP server

usage: ldapmodify [options] The list of desired operations are read from stdin or from the file specified by "-f file". Add or modify options: -a add values (default is to replace) -c continuous operation mode (do not stop on errors) -E [!]ext=extparam modify extensions (! indicate s criticality) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -S file write skipped modifications to file' Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -w - ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -W - Add or modify entries from an LDAP server

usage: ldapmodify [options] The list of desired operations are read from stdin or from the file specified by "-f file". Add or modify options: -a add values (default is to replace) -c continuous operation mode (do not stop on errors) -E [!]ext=extparam modify extensions (! indicate s criticality) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -S file write skipped modifications to file' Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -W Enter LDAP Password: ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb ldap_bind: Server is unwilling to perform (53) additional info: unauthenticated bind (DN with no password) disallowed [root@retail1 cn=config]# [root@retail1 cn=config]# slappasswd --help slappasswd: invalid option -- '-' Usage: slappasswd [options] -c format crypt(3) salt format -g generate random password -h hash password scheme -n omit trailing newline -o [=val] specify an option with a(n optional) value module-path= module-load= -s secret new password -u generate RFC2307 values (default) -v increase verbosity -T file read file for new password [root@retail1 cn=config]# slappasswd -s slappasswd: option requires an argument -- 's' Usage: slappasswd [options] -c format crypt(3) salt format -g generate random password -h hash password scheme -n omit trailing newline -o [=val] specify an option with a(n optional) value module-path= module-load= -s secret new password -u generate RFC2307 values (default) -v increase verbosity -T file read file for new password [root@retail1 cn=config]# [root@retail1 cn=config]# slappasswd -s admin {SSHA}KbMKRpd7Her22w0agsyCz4H2TzbbawOA [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/initial.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h ldapmodify: option requires an argument -- 'h' ldapmodify: unrecognized option -h Add or modify entries from an LDAP server

usage: ldapmodify [options] The list of desired operations are read from stdin or from the file specified by "-f file". Add or modify options: -a add values (default is to replace) -c continuous operation mode (do not stop on errors) -E [!]ext=extparam modify extensions (! indicate s criticality) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -S file write skipped modifications to file' Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/initial.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}hdb,cn=config"

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -W Enter LDAP Password: ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -W Enter LDAP Password: ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# cat /tmp/initial.ldif dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcRootPW olcRootPW: domain [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -w domain ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# ldapmodify -h retail1 -D olcDatabase={2}hdb -w domain ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 cn=config]# ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domai ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# cat /tmp/initial.ldif dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcRootPW olcRootPW: domain [root@retail1 cn=config]# ldapadd -h ldapadd: option requires an argument -- 'h' ldapadd: unrecognized option -h Add or modify entries from an LDAP server

usage: ldapadd [options] The list of desired operations are read from stdin or from the file specified by "-f file". Add or modify options: -a add values (default) -c continuous operation mode (do not stop on errors) -E [!]ext=extparam modify extensions (! indicate s criticality) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -S file write skipped modifications to file' Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domai ldap_bind: Invalid credentials (49) [root@retail1 cn=config]# ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ls cn=schema olcDatabase={0}config.ldif olcDatabase={1}monitor.ldif olcDatabase={2}hdb.ldif.bak cn=schema.ldif olcDatabase={-1}frontend.ldif olcDatabase={2}hdb.ldif [root@retail1 cn=config]# cat olcDatabase={2}hdb.ldif

dn: olcDatabase={2}hdb objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {2}hdb olcDbDirectory: /var/lib/ldap olcDbIndex: objectClass eq,pres olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub structuralObjectClass: olcHdbConfig entryUUID: e254c3b6-adf7-103a-85b5-1fad7229baee creatorsName: cn=config createTimestamp: 20201029060108Z olcSuffix: dc=domain,dc=com olcRootDN: uid=ldap,ou=people,dc=domain,dc=com olcAccess: {0}to dn.base="" by * read olcAccess: {1}to * by dn="uid=ldap,ou=people,dc=domain,dc=com" write by * re ad olcRootPW:: ZG9tYWlu entryCSN: 20201029093708.329508Z#000000#000#000000 modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth modifyTimestamp: 20201029093708Z [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 cn=config]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 cn=config]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=demo,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 cn=config]# vim /etc/passwd [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ls /tmp/setup.ldif /tmp/setup.ldif [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# sudo ldapadd -x -D "uid=ldap,ou=people,dc=domain,dc=com" -W -f /tmp/setup.ldif -h retail1 Enter LDAP Password: ldapadd: attributeDescription "dn": (possible missing newline after line 11, entry "dc=domain,dc=com"?) ldapadd: attributeDescription "dn": (possible missing newline after line 12, entry "dc=domain,dc=com"?) ldapadd: attributeDescription "dn": (possible missing newline after line 13, entry "dc=domain,dc=com"?) adding new entry "dc=domain,dc=com" ldap_add: Type or value exists (20) additional info: objectClass: value #3 provided more than once

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapadd -x -D "uid=ldap,ou=people,dc=domain,dc=com" -W -f /tmp/setup.ldif -h retail1 Enter LDAP Password: ldapadd: attributeDescription "dn": (possible missing newline after line 11, entry "dc=domain,dc=com"?) ldapadd: attributeDescription "dn": (possible missing newline after line 12, entry "dc=domain,dc=com"?) ldapadd: attributeDescription "dn": (possible missing newline after line 13, entry "dc=domain,dc=com"?) adding new entry "dc=domain,dc=com" ldap_add: Type or value exists (20) additional info: objectClass: value #3 provided more than once

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapadd -x -D "uid=ldap,ou=people,dc=domain,dc=com" -W -f /tmp/setup.ldif -h retail1 Enter LDAP Password: ldapadd: attributeDescription "dn": (possible missing newline after line 10, entry "dc=domain,dc=com"?) ldapadd: attributeDescription "dn": (possible missing newline after line 11, entry "dc=domain,dc=com"?) adding new entry "dc=domain,dc=com" ldap_add: Undefined attribute type (17) additional info: dn: attribute type undefined

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# vim /tmp/setup.ldif [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapadd -x -D "uid=ldap,ou=people,dc=domain,dc=com" -W -f /tmp/setup.ldif -h retail1 Enter LDAP Password: adding new entry "dc=domain,dc=com"

adding new entry "ou=people,dc=domain,dc=com"

adding new entry "uid=ldap,ou=people,dc=domain,dc=com"

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=domain,dc=com" -w domain

dn: dc=domain,dc=com objectClass: top objectClass: dcObject objectClass: organization o: domain com dc: domain

dn: ou=people,dc=domain,dc=com objectClass: organizationalUnit ou: people description: Users

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

search: 2 result: 0 Success

[root@retail1 cn=config]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "ou=people,dc=domain,dc=com" -w domain

dn: ou=people,dc=domain,dc=com objectClass: organizationalUnit ou: people description: Users

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

search: 2 result: 0 Success

[root@retail1 cn=config]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "uid=ldap,ou=people,dc=domain,dc=com" -w domain

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

search: 2 result: 0 Success

[root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# ldapdelete cn=schema/ olcDatabase={0}config.ldif olcDatabase={1}monitor.ldif olcDatabase={2}hdb.ldif.bak cn=schema.ldif olcDatabase={-1}frontend.ldif olcDatabase={2}hdb.ldif [root@retail1 cn=config]# ldapdelete -h ldapdelete: option requires an argument -- 'h' ldapdelete: unrecognized option -h Delete entries from an LDAP server

usage: ldapdelete [options] [dn]... dn: list of DNs to delete. If not given, it will be readed from stdin or from the file specified with "-f file". Delete Options: -c continuous operation mode (do not stop on errors) -f file read operations from file' -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -r delete recursively Common options: -d level set LDAP debugging level to level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# vim /etc/krb5.conf [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# [root@retail1 cn=config]# cd /var/lib/kr -bash: cd: /var/lib/kr: No such file or directory [root@retail1 cn=config]# cd /var/lib/k kafka/ kubelet/ kudu/ [root@retail1 cn=config]# cd /var/ [root@retail1 var]# ls account adm cache crash db empty games gopher kerberos lib local lock log mail nis opt preserve run spool tmp www yp [root@retail1 var]# cd lo -bash: cd: lo: No such file or directory [root@retail1 var]# cd local [root@retail1 local]# ls [root@retail1 local]# cd .. [root@retail1 var]# find . -name krb [root@retail1 var]# find . -name krb* ./kerberos/krb5 ./kerberos/krb5kdc ./log/krb5kdc.log [root@retail1 var]# cd kerberos/ [root@retail1 kerberos]# ls krb5 krb5kdc [root@retail1 kerberos]# cd krb5 [root@retail1 krb5]# cd ../krb5kdc/ [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# vim kdc.conf [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# vim /etc/krb5.conf [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# kadmin.local -q "addprinc test/[email protected]" Authenticating as principal cdh-master/[email protected] with password. WARNING: no policy specified for test/[email protected]; defaulting to no policy Enter password for principal "test/[email protected]": Re-enter password for principal "test/[email protected]": Principal "test/[email protected]" created. [root@retail1 krb5kdc]# pwd /var/kerberos/krb5kdc [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# cat kadm5.acl */[email protected] * [root@retail1 krb5kdc]# cat kdc.conf [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88

[realms] DOMAIN.COM = { master_key_type = aes256-cts acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal max_life = 25h max_renewable_life = 8d } [root@retail1 krb5kdc]# cat principal b1 $@▒d|▒▒▒@L▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ldap/[email protected]&▒_▒ dap/[email protected]\ Ys▒_cdh-master/[email protected]▒_> ▒▒▒(▒j▒▒W6C 8 ▒▒:▒Nw▒▒s\▒▒▒▒a▒[!▒▒D▒▒<▒3p▒e▒▒A▒.▒p▒z ▒,Q1 w▒▒▒▒▒▒▒IPtx▒>Qc"▒),M{▒<▒a▒6▒3▒<▒▒▒▒8▒▒▒▒▒▒1▒▒▒h▒▒▒▒Ѹk▒*N▒▒▒▒▒#▒y▒d▒L▒▒.▒▒U▒ ▒▒7▒xDS!▒▒▒▒▒▒▒ a▒+P▒▒▒▒▒▒SC˭ggiٝ▒▒A▒z▒▒▒z0▒q▒▒y▒Ru▒V▒Д▒▒▒p▒▒▒G,▒y▒{▒▒▒Oi.f7a▒We▒▒▒▒cdh-master/[email protected]&▒_▒ cdh-master/[email protected]_S▒_root/[email protected]_S▒_> ▒▒tf▒@Vv▒▒▒▒ݻ)▒▒▒R▒▒▒ՙ▒F▒5▒▒▒▒▒▒▒TNoȲ▒▒g,o▒2N▒8O▒w▒▒.▒▒▒3▒P!▒,K▒Ruf▒R▒_E▒▒▒▒rm#Am▒▒P▒Kˌ▒▒ 6\▒▒▒▒߆87▒▒▒▒_▒▒▒$Hi▒▒#▒<▒▒W▒▒,G▒▒J▒7▒-▒{▒.▒▒▒▒▒$$▒G▒ݟV▒▒{d▒4▒▒▒▒▒▒▒ƪa▒▒R▒▒z▒;(▒s▒▒▒&▒V▒▒_▒▒g▒▒▒▒▒▒A▒▒$Hi▒▒▒:▒>▒▒y▒:g/▒3▒[h▒▒$▒ ▒▒▒ ▒▒d▒u▒▒▒▒kiprop/[email protected]&▒_▒ kiprop/[email protected]\▒.▒[email protected]▒.▒_> [▒▒Sv▒dK@▒ ▒N xrP▒X­▒▒}▒▒J` ▒I▒▒▒mm▒▒ ▒▒▒X

[root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# vim principal.kadm5 [root@retail1 krb5kdc]# ls -lhtr total 64K -rw------- 1 root root 451 Oct 29 10:33 kdc.conf.bak -rw------- 1 root root 466 Oct 29 10:34 kdc.conf -rw------- 1 root root 21 Oct 29 10:35 kadm5.acl -rw------- 1 root root 8.0K Oct 29 10:53 principal.kadm5 -rw------- 1 root root 0 Oct 29 10:53 principal.kadm5.lock -rw------- 1 root root 0 Oct 29 19:31 principal.ok -rw------- 1 root root 40K Oct 29 19:31 principal [root@retail1 krb5kdc]# kadmin.local listprincs HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] K/[email protected] cdh-master/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hive/[email protected] hive/[email protected] hue/[email protected] hue/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] kiprop/[email protected] krbtgt/[email protected] ldap/[email protected] mapred/[email protected] oozie/[email protected] sentry/[email protected] solr/[email protected] spark/[email protected] test/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] zookeeper/[email protected] zookeeper/[email protected] zookeeper/[email protected] [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# klist Ticket cache: KEYRING:persistent:0:0 Default principal: cdh-master/[email protected]

Valid starting Expires Service principal 10/29/2020 19:28:07 10/30/2020 19:28:07 krbtgt/[email protected] renew until 11/05/2020 19:28:07 [root@retail1 krb5kdc]# HIVESERVER2_HOSTNAME=retail3 [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# beeline -u "jdbc:hive2://${HIVESERVER2_HOSTNAME}:10000/default;principal=hive/${HIVESERVER2_HOSTNAME}@DOMAIN.COM;" Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 scan complete in 1ms Connecting to jdbc:hive2://retail3:10000/default;principal=hive/[email protected]; 20/10/29 20:43:33 [main]: ERROR transport.TSaslTransport: SASL negotiation failure javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) at org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:203) at org.apache.hive.jdbc.HiveConnection.(HiveConnection.java:168) at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105) at java.sql.DriverManager.getConnection(DriverManager.java:664) at java.sql.DriverManager.getConnection(DriverManager.java:208) at org.apache.hive.beeline.DatabaseConnection.connect(DatabaseConnection.java:146) at org.apache.hive.beeline.DatabaseConnection.getConnection(DatabaseConnection.java:211) at org.apache.hive.beeline.Commands.connect(Commands.java:1496) at org.apache.hive.beeline.Commands.connect(Commands.java:1391) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hive.beeline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:52) at org.apache.hive.beeline.BeeLine.execCommandWithPrefix(BeeLine.java:1135) at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:1174) at org.apache.hive.beeline.BeeLine.initArgs(BeeLine.java:818) at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:898) at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:518) at org.apache.hive.beeline.BeeLine.main(BeeLine.java:501) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.util.RunJar.run(RunJar.java:221) at org.apache.hadoop.util.RunJar.main(RunJar.java:136) Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) ... 35 more Unknown HS2 problem when communicating with Thrift server. Error: Could not open client transport with JDBC Uri: jdbc:hive2://retail3:10000/default;principal=hive/[email protected];: GSS initiate failed (state=08S01,code=0) Beeline version 1.1.0-cdh5.12.1 by Apache Hive beeline> [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# su - hive Last login: Tue Oct 27 09:46:19 CST 2020 on pts/4 [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ HIVESERVER2_HOSTNAME=retail3 [hive@retail1 ~]$ [hive@retail1 ~]$ beeline -u "jdbc:hive2://${HIVESERVER2_HOSTNAME}:10000/default;principal=hive/${HIVESERVER2_HOSTNAME}@DOMAIN.COM;" Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 scan complete in 2ms Connecting to jdbc:hive2://retail3:10000/default;principal=hive/[email protected]; 20/10/29 20:44:33 [main]: ERROR transport.TSaslTransport: SASL negotiation failure javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) at org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:203) at org.apache.hive.jdbc.HiveConnection.(HiveConnection.java:168) at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105) at java.sql.DriverManager.getConnection(DriverManager.java:664) at java.sql.DriverManager.getConnection(DriverManager.java:208) at org.apache.hive.beeline.DatabaseConnection.connect(DatabaseConnection.java:146) at org.apache.hive.beeline.DatabaseConnection.getConnection(DatabaseConnection.java:211) at org.apache.hive.beeline.Commands.connect(Commands.java:1496) at org.apache.hive.beeline.Commands.connect(Commands.java:1391) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hive.beeline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:52) at org.apache.hive.beeline.BeeLine.execCommandWithPrefix(BeeLine.java:1135) at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:1174) at org.apache.hive.beeline.BeeLine.initArgs(BeeLine.java:818) at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:898) at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:518) at org.apache.hive.beeline.BeeLine.main(BeeLine.java:501) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.util.RunJar.run(RunJar.java:221) at org.apache.hadoop.util.RunJar.main(RunJar.java:136) Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) ... 35 more Unknown HS2 problem when communicating with Thrift server. Error: Could not open client transport with JDBC Uri: jdbc:hive2://retail3:10000/default;principal=hive/[email protected];: GSS initiate failed (state=08S01,code=0) Beeline version 1.1.0-cdh5.12.1 by Apache Hive beeline> [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ klist -f klist: Credentials cache keyring 'persistent:972:972' not found [hive@retail1 ~]$ kinit cdh-master/[email protected] Password for cdh-master/[email protected]: [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ klist -f Ticket cache: KEYRING:persistent:972:972 Default principal: cdh-master/[email protected]

Valid starting Expires Service principal 10/29/2020 20:46:03 10/30/2020 20:46:03 krbtgt/[email protected] renew until 11/05/2020 20:46:03, Flags: FRI [hive@retail1 ~]$ kdestory bash: kdestory: command not found... Similar command is: 'kdestroy' [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ kdestroy [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ klist -f klist: Credentials cache keyring 'persistent:972:972' not found [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ beeline -u "jdbc:hive2://${HIVESERVER2_HOSTNAME}:10000/default;principal=hive/${HIVESERVER2_HOSTNAME}@DOMAIN.COM;" Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 scan complete in 1ms Connecting to jdbc:hive2://retail3:10000/default;principal=hive/[email protected]; 20/10/29 20:47:01 [main]: ERROR transport.TSaslTransport: SASL negotiation failure javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) at org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:203) at org.apache.hive.jdbc.HiveConnection.(HiveConnection.java:168) at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105) at java.sql.DriverManager.getConnection(DriverManager.java:664) at java.sql.DriverManager.getConnection(DriverManager.java:208) at org.apache.hive.beeline.DatabaseConnection.connect(DatabaseConnection.java:146) at org.apache.hive.beeline.DatabaseConnection.getConnection(DatabaseConnection.java:211) at org.apache.hive.beeline.Commands.connect(Commands.java:1496) at org.apache.hive.beeline.Commands.connect(Commands.java:1391) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hive.beeline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:52) at org.apache.hive.beeline.BeeLine.execCommandWithPrefix(BeeLine.java:1135) at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:1174) at org.apache.hive.beeline.BeeLine.initArgs(BeeLine.java:818) at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:898) at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:518) at org.apache.hive.beeline.BeeLine.main(BeeLine.java:501) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.util.RunJar.run(RunJar.java:221) at org.apache.hadoop.util.RunJar.main(RunJar.java:136) Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) ... 35 more Unknown HS2 problem when communicating with Thrift server. Error: Could not open client transport with JDBC Uri: jdbc:hive2://retail3:10000/default;principal=hive/[email protected];: GSS initiate failed (state=08S01,code=0) Beeline version 1.1.0-cdh5.12.1 by Apache Hive beeline> [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ kinit hive/[email protected] Password for hive/[email protected]: kinit: Password incorrect while getting initial credentials [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ hive Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0

Logging initialized using configuration in jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/hive-common-1.1.0-cdh5.12.1.jar!/hive-log4j.properties Exception in thread "main" java.lang.RuntimeException: java.io.IOException: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "retail1/10.18.60.114"; destination host is: "retail4":8020; at org.apache.hadoop.hive.ql.session.SessionState.start(SessionState.java:571) at org.apache.hadoop.hive.cli.CliDriver.run(CliDriver.java:695) at org.apache.hadoop.hive.cli.CliDriver.main(CliDriver.java:634) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.util.RunJar.run(RunJar.java:221) at org.apache.hadoop.util.RunJar.main(RunJar.java:136) Caused by: java.io.IOException: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "retail1/10.18.60.114"; destination host is: "retail4":8020; at org.apache.hadoop.net.NetUtils.wrapException(NetUtils.java:772) at org.apache.hadoop.ipc.Client.call(Client.java:1508) at org.apache.hadoop.ipc.Client.call(Client.java:1441) at org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:230) at com.sun.proxy.$Proxy11.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolTranslatorPB.getFileInfo(ClientNamenodeProtocolTranslatorPB.java:771) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:260) at org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:104) at com.sun.proxy.$Proxy12.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.DFSClient.getFileInfo(DFSClient.java:2126) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1262) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1258) at org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81) at org.apache.hadoop.hdfs.DistributedFileSystem.getFileStatus(DistributedFileSystem.java:1258) at org.apache.hadoop.fs.FileSystem.exists(FileSystem.java:1418) at org.apache.hadoop.hive.ql.session.SessionState.createRootHDFSDir(SessionState.java:658) at org.apache.hadoop.hive.ql.session.SessionState.createSessionDirs(SessionState.java:606) at org.apache.hadoop.hive.ql.session.SessionState.start(SessionState.java:547) ... 8 more Caused by: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at org.apache.hadoop.ipc.Client$Connection$1.run(Client.java:718) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.ipc.Client$Connection.handleSaslConnectionFailure(Client.java:681) at org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:769) at org.apache.hadoop.ipc.Client$Connection.access$3000(Client.java:396) at org.apache.hadoop.ipc.Client.getConnection(Client.java:1557) at org.apache.hadoop.ipc.Client.call(Client.java:1480) ... 28 more Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) at org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:413) at org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:594) at org.apache.hadoop.ipc.Client$Connection.access$2000(Client.java:396) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:761) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:757) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:756) ... 31 more Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) ... 40 more [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ pwd /var/lib/hive [hive@retail1 ~]$ logout [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# ls kadm5.acl kdc.conf kdc.conf.bak principal principal.kadm5 principal.kadm5.lock principal.ok [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# [root@retail1 krb5kdc]# vim kdc.conf [root@retail1 krb5kdc]# vim kadm5.acl [root@retail1 krb5kdc]# vim /etc/k kafka/ kdump.conf kernel/ krb5.conf krb5.conf.bak krb5.conf.d/ ksmtuned.conf kubernetes/ [root@retail1 krb5kdc]# vim /etc/krb5.conf [root@retail1 krb5kdc]# Connection reset by 10.18.60.114 port 22

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $ ssh root@retail1 Last login: Thu Oct 29 19:32:37 2020 from 10.74.140.98 [root@retail1 ~]# [root@retail1 ~]# klist klist: No credentials cache found (filename: /tmp/krb5cc_0) [root@retail1 ~]# klist -f klist: No credentials cache found (filename: /tmp/krb5cc_0) [root@retail1 ~]# kadmin.local Authenticating as principal root/[email protected] with password. kadmin.local: ? Available kadmin.local requests:

add_principal, addprinc, ank Add principal delete_principal, delprinc Delete principal modify_principal, modprinc Modify principal rename_principal, renprinc Rename principal change_password, cpw Change password get_principal, getprinc Get principal list_principals, listprincs, get_principals, getprincs List principals add_policy, addpol Add policy modify_policy, modpol Modify policy delete_policy, delpol Delete policy get_policy, getpol Get policy list_policies, listpols, get_policies, getpols List policies get_privs, getprivs Get privileges ktadd, xst Add entry(s) to a keytab ktremove, ktrem Remove entry(s) from a keytab lock Lock database exclusively (use with extreme caution!) unlock Release exclusive database lock purgekeys Purge previously retained old keys from a principal get_strings, getstrs Show string attributes on a principal set_string, setstr Set a string attribute on a principal del_string, delstr Delete a string attribute on a principal list_requests, lr, ? List available requests. quit, exit, q Exit program. kadmin.local: listprincs HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] K/[email protected] cdh-master/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hive/[email protected] hive/[email protected] hue/[email protected] hue/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] kiprop/[email protected] krbtgt/[email protected] ldap/[email protected] mapred/[email protected] oozie/[email protected] sentry/[email protected] solr/[email protected] spark/[email protected] test/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] zookeeper/[email protected] zookeeper/[email protected] zookeeper/[email protected] kadmin.local: q [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# su - hive Last login: Thu Oct 29 20:43:53 CST 2020 on pts/1 [hive@retail1 ~]$ [hive@retail1 ~]$ [hive@retail1 ~]$ kadmin.local Couldn't open log file /var/log/kadmind.log: Permission denied Authenticating as principal hive/[email protected] with password. kadmin.local: Cannot open DB2 database '/var/kerberos/krb5kdc/principal': Permission denied while initializing kadmin.local interface [hive@retail1 ~]$ logout [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# hive Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0

Logging initialized using configuration in jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/hive-common-1.1.0-cdh5.12.1.jar!/hive-log4j.properties Exception in thread "main" java.lang.RuntimeException: java.io.IOException: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "retail1/10.18.60.114"; destination host is: "retail4":8020; at org.apache.hadoop.hive.ql.session.SessionState.start(SessionState.java:571) at org.apache.hadoop.hive.cli.CliDriver.run(CliDriver.java:695) at org.apache.hadoop.hive.cli.CliDriver.main(CliDriver.java:634) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.util.RunJar.run(RunJar.java:221) at org.apache.hadoop.util.RunJar.main(RunJar.java:136) Caused by: java.io.IOException: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "retail1/10.18.60.114"; destination host is: "retail4":8020; at org.apache.hadoop.net.NetUtils.wrapException(NetUtils.java:772) at org.apache.hadoop.ipc.Client.call(Client.java:1508) at org.apache.hadoop.ipc.Client.call(Client.java:1441) at org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:230) at com.sun.proxy.$Proxy11.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolTranslatorPB.getFileInfo(ClientNamenodeProtocolTranslatorPB.java:771) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:260) at org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:104) at com.sun.proxy.$Proxy12.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.DFSClient.getFileInfo(DFSClient.java:2126) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1262) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1258) at org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81) at org.apache.hadoop.hdfs.DistributedFileSystem.getFileStatus(DistributedFileSystem.java:1258) at org.apache.hadoop.fs.FileSystem.exists(FileSystem.java:1418) at org.apache.hadoop.hive.ql.session.SessionState.createRootHDFSDir(SessionState.java:658) at org.apache.hadoop.hive.ql.session.SessionState.createSessionDirs(SessionState.java:606) at org.apache.hadoop.hive.ql.session.SessionState.start(SessionState.java:547) ... 8 more Caused by: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at org.apache.hadoop.ipc.Client$Connection$1.run(Client.java:718) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.ipc.Client$Connection.handleSaslConnectionFailure(Client.java:681) at org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:769) at org.apache.hadoop.ipc.Client$Connection.access$3000(Client.java:396) at org.apache.hadoop.ipc.Client.getConnection(Client.java:1557) at org.apache.hadoop.ipc.Client.call(Client.java:1480) ... 28 more Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) at org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:413) at org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:594) at org.apache.hadoop.ipc.Client$Connection.access$2000(Client.java:396) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:761) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:757) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917) at org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:756) ... 31 more Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) ... 40 more [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# find /etc/ -name ".keytab" /etc/openldap/ldap_ldap_admin.keytab [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# find /var -name ".keytab" [root@retail1 ~]# find / -name ".keytab" /etc/openldap/ldap_ldap_admin.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/528-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/526-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/525-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/524-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/522-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/516-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/514-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/513-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/512-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/510-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/507-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/498-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/496-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/495-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/494-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/492-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/488-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/482-flume-AGENT/flume.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/481-solr-SOLR_SERVER/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/478-hdfs-DATANODE/hdfs.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/474-SolrServerGracefulShutDown/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/468-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/466-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/465-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/464-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/462-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/458-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/452-flume-AGENT/flume.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/451-solr-SOLR_SERVER/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/448-hdfs-DATANODE/hdfs.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/437-SolrServerGracefulShutDown/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/429-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/431-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/428-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/427-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/425-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/405-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/404-solr-SOLR_SERVER/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/385-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/374-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/371-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/365-hdfs-DATANODE/hdfs.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/358-SolrServerGracefulShutDown/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/351-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/347-solr-SOLR_SERVER/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/346-SolrServerGracefulShutDown/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/345-solr-SOLR_SERVER/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/343-SolrInit/solr.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/342-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/341-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/332-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/331-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/322-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/321-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/312-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/311-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/302-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/301-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/292-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/291-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/282-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/281-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/272-IMPALA-impala-STATESTORE-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/271-IMPALA-impala-CATALOGSERVER-d7e4aeb5240860830a83bbdb476d873f-ImpalaRoleDiagnosticsCollection/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/188-impala-CATALOGSERVER/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/186-impala-STATESTORE/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/185-impala-IMPALAD/impala.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/184-oozie-OOZIE_SERVER/oozie.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/182-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/179-yarn-NODEMANAGER/yarn.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/173-hdfs-DATANODE/hdfs.keytab /tmp/ldap_ldap_admin.keytab find: ‘/run/user/42/gvfs’: Permission denied [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# find / -name ".keytab" | grep hive /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/522-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/510-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/492-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/462-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/425-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/374-hive-HIVEMETASTORE/hive.keytab /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/182-hive-HIVEMETASTORE/hive.keytab find: ‘/run/user/42/gvfs’: Permission denied [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# vim /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/522-hive-HIVEMETASTORE/hive.keytab [root@retail1 ~]# vim /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/510-hive-HIVEMETASTORE/hive.keytab [root@retail1 ~]# vim /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/182-hive-HIVEMETASTORE/hive.keytab [root@retail1 ~]# vim /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/425-hive-HIVEMETASTORE/hive.keytab [root@retail1 ~]# vim /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/462-hive-HIVEMETASTORE/hive.keytab [root@retail1 ~]# kinit -kt /opt/cloudera-manager/cm-5.12.1/run/cloudera-scm-agent/process/522-hive-HIVEMETASTORE/hive.keytab hive/[email protected] [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: hive/[email protected]

Valid starting Expires Service principal 10/30/2020 09:33:01 10/31/2020 09:33:01 krbtgt/[email protected] renew until 11/04/2020 09:33:01 [root@retail1 ~]# hive Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0 Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0

Logging initialized using configuration in jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/hive-common-1.1.0-cdh5.12.1.jar!/hive-log4j.properties WARNING: Hive CLI is deprecated and migration to Beeline is recommended. hive> > > show databases; OK 20181120_bak_dim_ibi aipdc default tmp Time taken: 1.866 seconds, Fetched: 4 row(s) hive> use aipdc; OK Time taken: 0.034 seconds hive> show tables; OK device_control intent kafka_table scenario_control speaker_orionstar speaker_orionstar_bak speech_dialog Time taken: 0.038 seconds, Fetched: 7 row(s) hive> select * from intent limit 10; OK SLF4J: Class path contains multiple SLF4J bindings. SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/parquet-hadoop-bundle-1.5.0-cdh5.12.1.jar!/shaded/parquet/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/parquet-format-2.1.0-cdh5.12.1.jar!/shaded/parquet/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/parquet-pig-bundle-1.5.0-cdh5.12.1.jar!/shaded/parquet/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/hive-exec-1.1.0-cdh5.12.1.jar!/shaded/parquet/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/jars/hive-jdbc-1.1.0-cdh5.12.1-standalone.jar!/shaded/parquet/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation. SLF4J: Actual binding is of type [shaded.parquet.org.slf4j.helpers.NOPLoggerFactory] 2020-02-01 00:03:14.411 NULL NULL NULL 00001C11100001021301981296450000 音箱 4fe5731a2b3e74c006ee881bb91e7559 NULL NULL NULL NULL 202002 2020-02-01 00:05:41.107 NULL NULL NULL 美居app 8aac77eb-c50b-401b-acfb-236a508761fc NULL NULL NULL NULL 202002 2020-02-01 00:06:06.586 NULL NULL NULL 000000312220400119A1407B010Z0000 家电语音 95f5f21e-5ec6-4837-8b9a-55e0adbe93ad NULL NULL NULL NULL 202002 2020-02-01 00:09:46.973 NULL NULL NULL 00001C11100001021301981296450000 音箱 51cefd07dced24811ea95454938f3602 NULL NULL NULL NULL 202002 2020-02-01 00:11:01.427 NULL NULL NULL 00001C111000010213019A2212490000 音箱 6f696fff499f0520802948719caed1ed NULL NULL NULL NULL 202002 2020-02-01 00:20:06.769 NULL NULL NULL 00001C11100001021301981469400000 音箱 0c61a63ba7d4c93b87000c8ed40bf647 NULL NULL NULL NULL 202002 2020-02-01 00:22:23.94 NULL NULL NULL 00001C11100001021301971073270000 音箱 9e9dc48a237dca06edd2ffedd9906dbe NULL NULL NULL NULL 202002 2020-02-01 00:29:50.014 NULL NULL NULL 美居app 3e2993f8-6a2a-45c2-94c8-956fcf92d158 NULL NULL NULL NULL 202002 2020-02-01 00:30:23.388 NULL NULL NULL 00001C00100001010022107919000890 音箱 75d1301f-5606-4bf4-9a51-91b72524203f NULL NULL NULL NULL 202002 2020-02-01 00:31:09.984 NULL NULL NULL 000000312220400119A1807B14260000 家电语音 56f247b2-fb72-4f1c-a62f-87d4663acf40 NULL NULL NULL NULL 202002 Time taken: 0.493 seconds, Fetched: 10 row(s) hive> WARN: The method class org.apache.commons.logging.impl.SLF4JLogFactory#release() was invoked. WARN: Please see http://www.slf4j.org/codes.html#release for an explanation. Oct 30, 2020 9:34:02 AM WARNING: parquet.hadoop.ParquetRecordReader: Can not initialize counter due to context is not a instance of TaskInputOutputContext, but is org.apache.hadoop.mapreduce.task.TaskAttemptContextImpl Oct 30, 2020 9:34:02 AM INFO: parquet.hadoop.InternalParquetRecordReader: RecordReader initialized will read a total of 27284 records. Oct 30, 2020 9:34:02 AM INFO: parquet.hadoop.InternalParquetRecordReader: at row 0. reading next block Oct 30, 2020 9:34:02 AM INFO: parquet.hadoop.InternalParquetRecordReader: block read in memory in 18 ms. row count = 27284 [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# Connection reset by 10.18.60.114 port 22

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $ ssh root@retail1 Last login: Fri Oct 30 17:08:13 2020 from 10.74.140.98 [root@retail1 ~]# yum install migrationtools -y Loaded plugins: fastestmirror, langpacks base | 3.6 kB 00:00:00 centos7.3_x64 | 3.6 kB 00:00:00 cloudera-manager | 951 B 00:00:00 epel/x86_64/metalink | 19 kB 00:00:00 epel | 4.7 kB 00:00:00 extras | 2.9 kB 00:00:00 mysql-connectors-community | 2.6 kB 00:00:00 mysql-tools-community | 2.6 kB 00:00:00 mysql57-community | 2.6 kB 00:00:00 updates | 2.9 kB 00:00:00 zeroc-ice3.7 | 2.5 kB 00:00:00 zeroc-ice3.7-src | 2.4 kB 00:00:00 Loading mirror speeds from cached hostfile

• base: mirrors.aliyun.com
• epel: mirrors.tuna.tsinghua.edu.cn
• extras: mirrors.aliyun.com
• updates: mirrors.aliyun.com Resolving Dependencies --> Running transaction check ---> Package migrationtools.noarch 0:47-15.el7 will be installed --> Finished Dependency Resolution

Dependencies Resolved

Installing: migrationtools noarch 47-15.el7 base 26 k

Install 1 Package

Total download size: 26 k Installed size: 106 k Downloading packages: migrationtools-47-15.el7.noarch.rpm | 26 kB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : migrationtools-47-15.el7.noarch 1/1 Verifying : migrationtools-47-15.el7.noarch 1/1

Installed: migrationtools.noarch 0:47-15.el7

Complete! [root@retail1 ~]# vim /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# cp /usr/share/migrationtools/migrate_common.ph /usr/share/migrationtools/migrate_common.ph.bak [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# vim /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# cp /etc/passwd /etc/passwd.bak [root@retail1 ~]# /usr/share/migrationtools/migrate_common.ph /etc/passwd /cdhdata/bak/password.ldif -bash: /usr/share/migrationtools/migrate_common.ph: Permission denied [root@retail1 ~]# ls -l /usr/share/migrationtools/migrate_common.ph -rw-r--r-- 1 root root 8884 Oct 30 17:56 /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# bash /usr/share/migrationtools/migrate_common.ph /etc/passwd /cdhdata/bak/password.ldif /usr/share/migrationtools/migrate_common.ph: line 40: syntax error near unexpected token (' /usr/share/migrationtools/migrate_common.ph: line 40: $NETINFOBRIDGE = (-x "/usr/sbin/mkslapdconf");' [root@retail1 ~]# vim /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# chmod +x /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# /usr/share/migrationtools/migrate_common.ph /etc/passwd /cdhdata/bak/password.ldif /usr/share/migrationtools/migrate_common.ph: line 40: syntax error near unexpected token (' /usr/share/migrationtools/migrate_common.ph: line 40: $NETINFOBRIDGE = (-x "/usr/sbin/mkslapdconf");' [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# vim /usr/share/migrationtools/migrate_common.ph [root@retail1 ~]# vim /usr/share/migrationtools/migrate_passwd.pl [root@retail1 ~]# /usr/share/migrationtools/migrate_passwd.pl /etc/passwd /cdhdata/bak/password.ldif [root@retail1 ~]# vim /cdhdata/bak/password.ldif [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# cp /cdhdata/bak/password.ldif /tmp/impala.ldif [root@retail1 ~]# vim /tmp/impala.ldif [root@retail1 ~]# [root@retail1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: cdh-master/[email protected]

Valid starting Expires Service principal 10/30/2020 11:12:33 10/31/2020 11:12:33 krbtgt/[email protected] renew until 11/06/2020 11:12:33 [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# history |grep ldapsearch 817 ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain 818 ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domai 821 ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domai 822 ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain 826 ldapsearch -H ldapi:/// -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain 827 ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -w domain 828 ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=demo,dc=com" -w domain 838 ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=domain,dc=com" -w domain 839 ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "ou=people,dc=domain,dc=com" -w domain 840 ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "uid=ldap,ou=people,dc=domain,dc=com" -w domain 940 ldapsearch -h 1017 history |grep ldapsearch [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -b "dc=demo,dc=com" -w domain ldap_bind: Invalid credentials (49) [root@retail1 ~]# [root@retail1 ~]# kinit -kt /etc/openldap/ldap_ldap_admin.keytab ldap/ldap_admin [root@retail1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: ldap/[email protected]

Valid starting Expires Service principal 10/30/2020 18:15:34 10/31/2020 18:15:34 krbtgt/[email protected] renew until 11/06/2020 18:15:34 [root@retail1 ~]# ldapsearch -x -b "dc=demo,dc=com" -w domain ldap_bind: Invalid credentials (49) [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=demo,dc=com" -w domain

search: 2 result: 32 No such object

[root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "dc=demo,dc=com" -b "dc=demo,dc=com" -w domain ldap_bind: Invalid credentials (49) [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -b "dc=domain,dc=com" -w domain ldap_bind: Invalid credentials (49) [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "dc=domain,dc=com" -b "dc=domain,dc=com" -w domain ldap_bind: Invalid credentials (49) [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# vim .bash_history [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=domain,dc=com" -w domain

dn: dc=domain,dc=com objectClass: top objectClass: dcObject objectClass: organization o: domain com dc: domain

dn: ou=people,dc=domain,dc=com objectClass: organizationalUnit ou: people description: Users

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

search: 2 result: 0 Success

[root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "ou=people,dc=domain,dc=com" -w domain

dn: ou=people,dc=domain,dc=com objectClass: organizationalUnit ou: people description: Users

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

search: 2 result: 0 Success

[root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapadd -x -D "uid=ldap,ou=people,dc=domain,dc=com" -f /tmp/impala.ldif -W -h retail1 Enter LDAP Password: adding new entry "uid=impala,ou=People,dc=domain,dc=com"

[root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=domain,dc=com" -w ldapsearch: option requires an argument -- 'w' ldapsearch: unrecognized option -w usage: ldapsearch [options] [filter [attributes...]] where: filter RFC 4515 compliant LDAP search filter attributes whitespace-separated list of attribute descriptions which may include: 1.1 no attributes * all user attributes + all operational attributes Search options: -a deref one of never (default), always, search, or find -A retrieve attribute names only (no values) -b basedn base dn for search -c continuous operation mode (do not stop on errors) -E [!][=] search extensions (! indicates criticality) [!]domainScope (domain scope) !dontUseCopy (Don't Use Copy) [!]mv= (RFC 3876 matched values filter) [!]pr=[/prompt|noprompt] (RFC 2696 paged results/prompt) [!]sss=[-]<attr[:OID]>[/[-]<attr[:OID]>...] (RFC 2891 server side sorting) [!]subentries[=true|false] (RFC 3672 subentries) [!]sync=ro[/] (RFC 4533 LDAP Sync refreshOnly) rp[/][/] (refreshAndPersist) [!]vlv=/(//|:) (ldapv3-vlv-09 virtual list views) [!]deref=derefAttr:attr[,...][;derefAttr:attr[,...][;...]] [!][=:] (generic control; no response handling) -f file read operations from file' -F prefix URL prefix for files (default: file:///tmp/) -l limit time limit (in seconds, or "none" or "max") for search -L print responses in LDIFv1 format -LL print responses in LDIF format without comments -LLL print responses in LDIF format without comments and version -M enable Manage DSA IT control (-MM to make critical) -P version protocol version (default: 3) -s scope one of base, one, sub or children (search scope) -S attr sort the results by attribute attr' -t write binary values to files in temporary directory -tt write all values to files in temporary directory -T path write files to directory specified by path (default: /tmp) -u include User Friendly entry names in the output -z limit size limit (in entries, or "none" or "max") for search Common options: -d level set LDAP debugging level to `level' -D binddn bind DN -e [!][=] general extensions (! indicates criticality) [!]assert= (RFC 4528; a RFC 4515 Filter string) [!]authzid= (RFC 4370; "dn:" or "u:") [!]chaining[=[/]] one of "chainingPreferred", "chainingRequired", "referralsPreferred", "referralsRequired" [!]manageDSAit (RFC 3296) [!]noop ppolicy [!]postread[=] (RFC 4527; comma-separated attr list) [!]preread[=] (RFC 4527; comma-separated attr list) [!]relax [!]sessiontracking abandon, cancel, ignore (SIGINT sends abandon/cancel, or ignores response; if critical, doesn't wait for SIGINT. not really controls) -h host LDAP server -H URI LDAP Uniform Resource Identifier(s) -I use SASL Interactive mode -n show what would be done but don't actually do it -N do not use reverse DNS to canonicalize SASL host name -O props SASL security properties -o [=] general options nettimeout= (in seconds, or "none" or "max") ldif-wrap= (in columns, or "no" for no wrapping) -p port port on LDAP server -Q use SASL Quiet mode -R realm SASL realm -U authcid SASL authentication identity -v run in verbose mode (diagnostics to standard output) -V print version info (-VV only) -w passwd bind password (for simple authentication) -W prompt for bind password -x Simple authentication -X authzid SASL authorization identity ("dn:" or "u:") -y file Read password from file -Y mech SASL mechanism -Z Start TLS request (-ZZ to require successful response) [root@retail1 ~]# ldapsearch -x -D "uid=ldap,ou=people,dc=domain,dc=com" -b "dc=domain,dc=com" -W Enter LDAP Password:

dn: dc=domain,dc=com objectClass: top objectClass: dcObject objectClass: organization o: domain com dc: domain

dn: ou=people,dc=domain,dc=com objectClass: organizationalUnit ou: people description: Users

dn: uid=ldap,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount cn: LDAP admin account uid: ldap sn: ldap uidNumber: 1004 gidNumber: 1004 homeDirectory: /home/ldap loginShell: /bin/bash

dn: uid=impala,ou=people,dc=domain,dc=com uid: impala cn: Impala objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount userPassword:: e2NyeXB0fSEh shadowLastChange: 17564 loginShell: /bin/bash uidNumber: 967 gidNumber: 961 homeDirectory: /var/lib/impala gecos: Impala

search: 2 result: 0 Success

[root@retail1 ~]# ldappasswd -x -D 'uid=ldap,ou=people,dc=domain,dc=com' -W "uid=impala,ou=people,dc=domain,dc=com" -S -h retail1 New password: Re-enter new password: passwords do not match [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# ldappasswd -x -D 'uid=ldap,ou=people,dc=domain,dc=com' -W "uid=impala,ou=people,dc=domain,dc=com" -S -h retail1 New password: Re-enter new password: Enter LDAP Password: [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# Connection reset by 10.18.60.114 port 22

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $ ssh root@retail1 Last login: Fri Oct 30 19:15:27 2020 from 10.74.140.98 [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: ldap/[email protected]

Valid starting Expires Service principal 10/30/2020 18:15:34 10/31/2020 18:15:34 krbtgt/[email protected] renew until 11/06/2020 18:15:34 [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kinit cdh-master/admin Password for cdh-master/[email protected]: [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: cdh-master/[email protected]

Valid starting Expires Service principal 10/30/2020 19:42:10 10/31/2020 19:42:10 krbtgt/[email protected] renew until 11/06/2020 19:42:10 [root@retail1 ~]# kadmin.local -q "addprinc admin/[email protected]" ^C [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin.local -q "listprincs" Authenticating as principal cdh-master/[email protected] with password. HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] HTTP/[email protected] K/[email protected] cdh-master/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hdfs/[email protected] hive/[email protected] hive/[email protected] hue/[email protected] hue/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] impala/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] kiprop/[email protected] krbtgt/[email protected] ldap/[email protected] mapred/[email protected] oozie/[email protected] sentry/[email protected] solr/[email protected] spark/[email protected] test/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] yarn/[email protected] zookeeper/[email protected] zookeeper/[email protected] zookeeper/[email protected] [root@retail1 ~]# kadmin.local -q "listprincs" | grep admin Authenticating as principal cdh-master/[email protected] with password. cdh-master/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] ldap/[email protected] [root@retail1 ~]# kadmin.local -q "addprinc admin/[email protected]" Authenticating as principal cdh-master/[email protected] with password. WARNING: no policy specified for admin/[email protected]; defaulting to no policy Enter password for principal "admin/[email protected]": Re-enter password for principal "admin/[email protected]": Principal "admin/[email protected]" created. [root@retail1 ~]# [root@retail1 ~]# [root@retail1 ~]# kadmin.local -q "listprincs" | grep admin Authenticating as principal cdh-master/[email protected] with password. admin/[email protected] cdh-master/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] ldap/[email protected] [root@retail1 ~]# Connection reset by 10.18.60.114 port 22

xiaoqiaoxq@xiaoqiaoxq633 MINGW64 ~/Desktop $