How can I completely reset Kerberos on SL Server to start afresh?

[Joe Carroll]

I’ve tried following the instructions at http://www.ohelm.co.uk/rebuilding-kerberos-database/ but I think that, as a result of doing something in the wrong order—specifically I deleted the contents of /var/db/krb5kdc/ but aftwards the server thinks it still belongs to a Kerberos realm according to sso_util info -g—I get an error when I try to use sso_util remove:

shutting down kadmind
kadmind shut down
shutting down kdc
removing KDC from the KerberosClient config record
Contacting the directory server
Directory updated
kdc shut down
Failed to remove the admin user error is 1
removing kdc database files

This is despite the command is being issued correctly in the following form:

sso_util remove -v 7 -k -a diradmin -p password -r REALM

After this the server thinks it still belongs to the same realm (according to sso_util info -g). The problem seems to be that sso_util can no longer authenticate the directory administrator.
Surely there is a way to reset things without a clean reinstall? Please help!

[Author]

Posts