Unknown code adb 10 : cannot lock database error

[Ken Raeburn]

On Nov 9, 2010, at 14:12, Shivakeshav Santi wrote:
>   We are seeing regular "Cannot lock database" errors on the KDC. The clients see "Unknown code adb 10" error.

>From a quick look at the sources, that can come up in a few cases.  One of the database files may be locked already by another process; you can use lsof to see what other processes might have the files open.  It may be trying to get an exclusive lock on a file it doesn't have write access to.

The attempts to lock the database files use non-blocking locking calls, and only make five attempts at one-second intervals before giving up.  So if something else is keeping the database locked, either for more than five seconds, or for multiple briefer periods that happen to coincide with the attempts, that could be the problem.  Do you know if anything else "interesting" is happening (KDB-related jobs running, or really intense load on the KDC or kadmin servers) at those times?

> We tried to retsrt the kadmin database and also run the following command but nothing seems to have helped.
> 
> restorecon -R -v /var/kerberos/krb5kdc

'fraid I can't help with SELinux issues....

Ken