how to set up kerberos slave server
chechu chechu
chechuironman at hotmail.com
Tue Oct 17 20:10:32 EDT 2006
Hi¡
I want to add an slave kerberos server(shinobi) to my master (shogun),
my /etc/krb5.conf is :
[libdefaults]
default_realm = IRONMAN.ES
# The following krb5.conf variables are only for MIT Kerberos.
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
[realms]
IRONMAN.ES = {
kdc = shogun.ironman.es
kdc = shinobi.ironman.es
admin_server = shogun.ironman.es
}
[domain_realm]
.ironman.es = IRONMAN.ES
ironman.es = IRONMAN.ES
[login]
krb4_convert = true
krb4_get_tickets = true
krb5_get_tickets = true
[logging]
kdc = FILE:/var/log/kerberos/krb5kdc.log
admin_server = FILE:/var/log/kerberos/kadmin.log
default = FILE:/var/log/kerberos/krb5lib.log
The master works right but the slave which have the same /etc/krb5.conf
than the master don't start, the error that shows me is:
shinobi:~# /etc/init.d/krb5-admin-server start
Starting Kerberos administrative servers: kadmindkadmind: Syntax error
in profile relation while initializing, aborting
failed!
And kadmin.log shows...:
Oct 17 12:32:55 shinobi kadmind[20615](Error): Syntax error in profile
relation while initializing, aborting
I don't know what is failing cause the same conf file works right in the
master. someone can help me.
thanks
More information about the krbdev
mailing list