KDC won't start after fresh install

Sebastian Singer sebastian.singer at kesslar.de
Thu Sep 5 11:03:23 EDT 2013


 Nothing changed. I disabled IPv6:
# echo net.ipv6.conf.all.disable_ipv6=1 > /etc/sysctl.d/disableipv6.conf
and did
# sysctl -p /etc/sysctl.d/disableipv6.conf
restarted both servers kadmin and kdc.
Still the same old error.
?
 
----------------ursprüngliche Nachricht-----------------
Von: "Sebastian Singer" sebastian.singer at kesslar.de 
An: "Roland C. Dowdeswell" elric at imrryr.org 
Kopie: "kerberos MIT.EDU" kerberos at mit.edu 
Datum: Thu, 5 Sep 2013 16:47:59 +0200
-------------------------------------------------
 
 
> Right. So I will disable IPv6 and report back here.
> Regards,
> Sebastian
> 
> ----------------ursprüngliche Nachricht-----------------
> Von: "Roland C. Dowdeswell" elric at imrryr.org 
> An: "Sebastian Singer" sebastian.singer at kesslar.de 
> Kopie: "Benjamin Kaduk" kaduk at MIT.EDU , "kerberos MIT.EDU" kerberos at MIT.EDU 
> Datum: Thu, 5 Sep 2013 15:40:55 +0100
> -------------------------------------------------
> 
> 
>> On Thu, Sep 05, 2013 at 04:39:48PM +0200, Sebastian Singer wrote:
>>>
>> 
>>> Thanks, but ... I don't really understand, sorry. Is this version
>>> buggy? How can I fix it?
>>> I tried to start kdc and looked at
>>> # /etc/init.d/krb5-kdc status
>>> It says it's started.
>>> But when trying to connect via
>>> # kadmin
>>> it stops with the message:
>>> "kadmin: Cannot contact any KDC for requested realm while initiating 
>>> kadmin
>>> interface"
>>> So kdc is up in one way or the other but does not connect to the
>>> realm defined in /etc/kr5.conf ?
>> 
>> Looks to me like a bug. If you are not using IPv6, then you can workaround
>> the issue by disabling IPv6 on your server.
>> 
>> --
>> Roland Dowdeswell http://Imrryr.ORG/~elric/
>> 
> 
> -- 
> Dear staff of the NSA,
> this is a solely private e-mail, no terrorist background intended nor included. 
> So if you don't mind you can confidently delete it. Further storing is futile.
> Yours,
> (well I guess you know who I am in any case)
> 
> 
> ________________________________________________
> Kerberos mailing list Kerberos at mit.edu 
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 

-- 
Dear staff of the NSA,
this is a solely private e-mail, no terrorist background intended nor included. So if you don't mind you can confidently delete it. Further storing is futile.
Yours,
(well I guess you know who I am in any case)




More information about the Kerberos mailing list