krb5kdc errors!

Hello!

While I’ve used OS X for a little bit it’s only been in the past couple of months that I’ve been elevated – somewhat surprisingly – to an OS X Server Admin. As such I’ve been relying quite heavily on both AFP and the Apple Discussion forums to help me out of my bone-headed noob problems. Even as a lurker, I owe many of you beers. 🙂

However, there is one question that is lingering…

I have an OS X Server 10.4.6 XServe G5 (dual 2.3) hanging out in an environment where it is doing VPN, file sharing (Windows/Samba), e-mail (to Outlook clients), DNS, DHCP and Jabber. Due to some more noobishness, I had to go through the (many) steps to correctly configure Kerberos and LDAP so that they would work right.

My environment is a pretty basic Windows-Workgroup sort of thing – it’s a bit of an experiment for my company. We’ve put the OS X Server in, but the clients are working in pure Workgroup mode – they don’t authenticate to the server at Windows login. They do authenticate for file sharing, email, VPN as one would expect, of course.

I finally have krb5kdc running, and kinit/sso_util info -g/kadmin.local -q listprincs all return good values. There’s just one thing that’s making me scratch my head, and it happens in the kdc.log file whenever krb5kdc loads –

May 03 08:44:55 server1.domain.org krb5kdc[14566](info): setting up network…
krb5kdc: Address already in use – Cannot bind server socket to port 88 address fe80::20d:93ff:fe9e:5963%en0
May 03 08:44:55 server1.domain.org krb5kdc[14566](info): set up 0 sockets
krb5kdc: no sockets set up?

That’s the entire contents of the kdc.log file after a cold boot of the system. It appears to me that krb5kdc is trying to bind to IPv6…and that address does resolve down to en0, which is the one Ethernet port currently in use.

Does this even mean anything? My users are authenticating against Open Directory correctly for their shared files without issue, as are email users and my VPN tests. Google and several searches of AFP haven’t produced any information as to what this actually means. Everything -seems- to be working, but as Agent Smith says, appearances can be decieving…

Thanks to everyone in advance!