Information on "Kadmin.local" database lock error

Tom Yu tlyu at MIT.EDU
Tue Aug 14 13:04:55 EDT 2012


Abhilash S <abhilashvkm at gmail.com> writes:

> Hello Tom,
>
> Version and OS:
>                  we have kerberos 1.9.2 version.
>                  It is running under Linux (x86_64 GNU/Linux).
>
> KDC Traffic :
>                we do have heavy kadmin traffic.
>                 we used to get avg or 4-7 Authentication request per second
> For updating kerberos database  , we have a java code which forks
> "kadmin.local" utility , and uses kdc commands to
> create/modify/delete  principals,
>
> This doesn't happens regularly but we gets this error at least 10 to 15 per
> month.
> Principle file size will be around 1.3G.

Thanks.  You sent another message that contained the following:

> I am seeing this occurring quite frequently, only workaround is to restart
> the kris deamons
>  is there any patch or workaround available to get rid of this error.
>
> I saw few update on this bug over here,
> https://bugzilla.redhat.com/show_bug.cgi?id=586032

When you say you have to restart the daemon, is this because
subsequent runs of kadmin.local couldn't get a database lock until
after you restart the KDC?


More information about the Kerberos mailing list