Creating Kerberos Principals

Add service principals for each node in the DataStax Enterprise cluster.

Procedure

Use kadmin to perform the following steps:

Launch Kerberos admin shell with an administrator account that has add privileges.
```
kadmin -p <user_name>/admin
```
For each node add two principals:
- Add a service principal for the database using a random key value:
  addprinc -randkey <service_name>/<FQDN>
  where
  - <service_name> - Name for the DataStax Enterprise database principal, such as dse.
  - <FQDN> - Fully Qualified Domain Name of the host.
    
    See Principal names and DNS.
- Add a service principal for HTTP using a random key value:
  addprinc -randkey HTTP/<FQDN>
  where <FQDN> - Fully Qualified Domain Name of the host.
Verify that the principals have been added by running the listprincs command within kadmin:
```
kadmin: listprincs
```
```
HTTP/node1.example.com@EXAMPLE.COM
HTTP/node2.example.com@EXAMPLE.COM
dse/node1.example.com@EXAMPLE.COM
dse/node2.example.com@EXAMPLE.COM
kadmin/admin@EXAMPLE.COM
```
where node<*>.example.com is the FQDN and EXAMPLE.COM is your Kerberos realm, which must be all uppercase.