Another Kerberos Issue
Hey Everbody,
I'm about to pull my hair out. I'm trying to stand up a new Leopard Server box and I'm having a heck of a time getting Kerberos to start. This particular box started as a 10.5.6 client and was upgraded to server 10.5.6 before I started the DNS and Open Directory config. I followed the Leopard Quickstart Guide as featured [url=https://www.afp548.com/filemgmt_data/files/Leopard%20Server%20Quickstart%20Guide.pdf]here[/url] as I have done on other Server boxes before this one and for some reason I just can't get Kerberos to get going. If anybody can help, I would greatly appreciate it! Here's the output of slapconfig.log... MANY THANKS IN ADVANCE!
[code]2009-02-01 18:45:50 -0500 - slapconfig -setstandalone
2009-02-01 18:52:09 -0500 - slapconfig -setmaxnumberofdblocks
2009-02-01 18:52:09 -0500 - Updating bdb lock size to 10000
2009-02-01 18:52:09 -0500 - Not updating bdb lock size - Not an OD server
2009-02-01 18:52:10 -0500 - slapconfig -updateindexes
2009-02-01 18:58:23 -0500 - slapconfig -createldapmasterandadmin
2009-02-01 18:58:23 -0500 - Creating password server slot
2009-02-01 18:58:23 -0500 - command: /usr/sbin/mkpassdb -u diradmin -p -q
2009-02-01 18:58:23 -0500 - command: /usr/sbin/mkpassdb -a -u root -p -q
2009-02-01 18:58:23 -0500 - command: /usr/sbin/mkpassdb -a -u server.gocarter.me$ -p -q
2009-02-01 18:58:23 -0500 - command: /usr/sbin/mkpassdb -setcomputeraccount 0x4986371f6b8b45670000000300000003
2009-02-01 18:58:23 -0500 - Setting SASL realm to
2009-02-01 18:58:23 -0500 - command: /usr/sbin/mkpassdb -setrealm server.gocarter.me
2009-02-01 18:58:27 -0500 - Starting LDAP server (slapd)
2009-02-01 18:58:27 -0500 - command: /usr/bin/ldapadd -c -x -D uid=root,cn=users,dc=server,dc=gocarter,dc=me -w ****
2009-02-01 18:58:27 -0500 - command: /usr/sbin/slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
2009-02-01 18:58:27 -0500 - slaptest command output:
config file testing succeeded
2009-02-01 18:58:27 -0500 - Stopping LDAP server (slapd)
2009-02-01 18:58:30 -0500 - Starting LDAP server (slapd)
2009-02-01 18:58:30 -0500 - command: /usr/bin/ldapmodify -c -x -D uid=root,cn=users,dc=server,dc=gocarter,dc=me -w ****
2009-02-01 18:58:30 -0500 - Stopping LDAP server (slapd)
2009-02-01 18:58:30 -0500 - Starting LDAP server (slapd)
2009-02-01 18:58:30 -0500 - command: /usr/bin/ldapadd -c -x -D uid=root,cn=users,dc=server,dc=gocarter,dc=me -w ****
2009-02-01 18:58:30 -0500 - Attempting to open /LDAPv3/127.0.0.1 node
2009-02-01 18:58:30 -0500 - Opened /LDAPv3/127.0.0.1 node
2009-02-01 18:58:31 -0500 - Configuring Kerberos server, realm is SERVER.GOCARTER.ME
2009-02-01 18:58:31 -0500 - Removed directory at path /var/db/krb5kdc.
2009-02-01 18:58:31 -0500 - command: /sbin/kerberosautoconfig -r SERVER.GOCARTER.ME -m server.gocarter.me -u -v 1
2009-02-01 18:58:31 -0500 - command: /usr/sbin/kdcsetup -f /LDAPv3/127.0.0.1 -w -a diradmin -p **** -v 1 SERVER.GOCARTER.ME
2009-02-01 18:58:42 -0500 - kdcsetup command output:
Contacting the Directory Server
Authenticating to the Directory Server
Creating Kerberos directory
Creating KDC Config File
Creating Admin ACL File
Creating Kerberos Master Key
Creating Kerberos Database
Creating Kerberos Admin user
WARNING: no policy specified for diradmin@SERVER.GOCARTER.ME; defaulting to no policy
Adding kerberos auth authority to admin user
Creating keytab for the admin tools
Adding KDC & kadmind to launchd
com.apple.kdcmond: Already loaded
The KDC is not running error = 3
Failed to configure error = 3
2009-02-01 18:58:42 -0500 - kdcsetup command failed with status 3
[/code]