13 在 Zabbix 中配置 Kerberos

概述

Kerberos 认证可在 Zabbix 的网页监控和 HTTP 监控项 中使用。

本节描述了一个使用 Kerberos 与 Zabbix 服务器进行配置的示例，以使用用户 'zabbix' 对 www.example.com 进行网页监控。

步骤

Security and file-permission notes

Keytab files must be readable only by the account that needs them. Example permissions: 0400 owned by zabbix:zabbix for a zabbix user keytab, or 0440 and root:www-data for an Apache keytab.

Avoid storing long-lived plaintext passwords on the host. Use keytabs or domain-joined machine principals where possible.

When running tests or scripts that set KRB5CCNAME or copy keytabs, double-check ownership and permissions after the operation — a webserver rejecting credentials is commonly a file-permission problem.