Creating Kerberos Principals

Add service principals for each node in the DataStax Enterprise cluster.

Procedure

Use kadmin to perform the following steps

Launch Kerberos admin shell with an administrator account that has add privileges.
```
kadmin -p user_name/admin
```
For each node add two principals:
- Add a service principal for the database using a random key value:
```
addprinc -randkey service_name/FQDN
```
  where
  - service_name - Name for the DataStax Enterprise database principal, such as dse.
  - FQDN - Fully Qualified Domain Name of the host.
  Tip: See Principal names and DNS.
- Add a service principal for HTTP using a random key value:
```
addprinc -randkey HTTP/FQDN
```
  where FQDN - Fully Qualified Domain Name of the host.
Verify that the principals have been added by running the listprincs command within kadmin:
```
kadmin: listprincs
```
```
HTTP/node1.example.com@EXAMPLE.COM
HTTP/node2.example.com@EXAMPLE.COM
dse/node1.example.com@EXAMPLE.COM
dse/node2.example.com@EXAMPLE.COM
kadmin/admin@EXAMPLE.COM
```
where node*.example.com is the FQDN and EXAMPLE.COM is your Kerberos realm, which must be all uppercase.