create principals fails

["kai plückhahn"]

Yes, of course.
But i think, i have to offer you some further information.

the kerberos authentication works befor i wanted openldap as back-end. then i wanted to switch to openldap-backend without setting up a clear system...
...
the subtree is ok. <-- in the DIT.
the conf-files are ok. i hope so!
slapd.conf modified for kerberos. i think this is not the problem, too.
stashpw generated. <-- file is there with both pws.

-no service is started-

Now i want to create with the command
kadmin.local
a root-user.
But it fails with 
Authenticating as principal root/admin at LOCAL with password.
kadmin.local: Server error while initializing kadmin.local interface
when i now switch the krb5.conf to the old one i can start kadmin.local and i can start the services. but when i try now to start kadmin interface is there no root(admin)-user in the dit with which i can authenticate.
i don´t know, what the problem could be...:(

-------- Original-Nachricht --------
> Datum: Mon, 23 Nov 2009 14:20:24 +0100
> Von: "kai plückhahn" <derplueck at gmx.de>
> An: kerberos at mit.edu
> Betreff: create principals fails

> i often read this question. but never seen an answer.
> i want to have openldap as a backend to kerberos.
> - kerberos 5
> - openldap 2.4
> 
> i could create the subtree in the dit. But when i try to create principals
> with kadmin, it fails.
> My first step was, that i created the conf files...kdc.conf and
> krb5.conf.After this i created with the kdb5_ldap_util the subtree and the stash-pws.
> But then...to create principals with kadmin or kadmin.local fails. 
> In my book there is a note, that i have to create first of all a local
> database with kdb5_util create -s to use the kadmin.local interface without
> problems...
> 
> How a have to create the principals, is there a trick?
> 
> I don´t know. Please help me.
> -- 
> GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
> Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos

-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser