Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #359916
    SpudNYC
    Participant

    Hi,

    I have been trying fruitlessly to get KDC running on Mac OS X Server 10.3.6. Everything I’ve read on the internet points to DNS as the likely culprit for KDC not starting up when my server is set as an Open Directory Master.

    Currently the server (named small) is set up as the gateway/firewall for a small office. It has an external ethernet interface (eth0) connected to a DSL modem and an internal ethernet interface (eth1) connected to the rest of the office.

    The host name of the server is set up correctly in our DSL provider’s DNS servers. A dig results in the correct IP. A dig -x results in the correct hostname.

    In addition, we are running DNS on the machine for internal network services. eth1 is bound to 192.168.1.1. When the DNS running on small is queried from inside the network, it shows small’s IP as 192.168.1.1 as it should, and reverse query works here as well.

    So, in summary:
    * DSL provider’s nameservers have one set of DNS information with external IP of the server
    * DNS running on the server has the internal set of DNS information with internal IP of the server

    Could these two be in conflict, and stopping the startup of my KDC? I have been beating my head against the wall trying to get this to work, and this is the best idea I could come up with.

    Alternatively, does anyone know if there is any sort of logging of the auto-startup/configuration portion of the KDC that Apple enabled? The fact that it just dies silently with no relevant information is infuriating.

    Any advice appreciated. Thanks!

    -Finn

    #360278
    Detrius
    Participant

    Your confusion over the two different results when querying are likely unrelated here. The important thing is the resolution of the server must work. What the clients see is unimportant as far as getting the KDC running is concerned. It’s important later, but not now.

    Check the folder /var/db/krb5kdc/. There should be a dozen or so files in this folder for the KDC to run properly. If the folder doesn’t exist, create and and make it accessible only to root. Then, demote your server to standalone. Save the setting. Reboot for good luck (probably not necessary). Then, promote the server to OD Master. Check in /var/db/krb5kdc/. See if the files are there. If not, repeat the process. I’ve had to do this two or three times before without changing anything else before it would work.

    Once you have the kdc running, we can tackle whether or not your addition DNS settings are an issue. For now, what the clients see isn’t as important as what the server sees.

    #362791
    phil
    Participant

    What should the realm be the FQDN of the external card or the internal?

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.

Comments are closed