KDC and OD problem

[Anonymous]

Hi everybody,
I ran through lot of problem when upgrading from 3.8 to 3.9 and finally end up with a complete re-installation.
I upgraded until 3.9 before to promote the server to Open Directory Master. The is that I kannot have KDC and OD working together.
I build the KDC according to your Article “Kerberos Mac OS X Implementation” (thanks a lot 🙂 ).
When I restart the server the KDC is allways “stopped”.
I can start it by hand

sudo krb5kdc
sudo kadmind

But in Server Admin it’s still impossible to promote any user to have a Open Directory password. When I try to change it a popup windows appear telling me that:

Missing Config Record
You must set up the Password Server before using it.
Use Server Admin to do so.

How to setup this Password Server?
Other infos when I ran:

sso_util info -v 8 -g -r ldap://127.0.0.1/
dsOpenDirNode failed with error of type -14008
This machine is not part of a kerberized directory

the error is not a good new I think…

Any help will be welcome.
Thanks for this great forum.

David

[Anonymous]

Thanks for the reply,
So, the admin shortname is in lowercase.
When I pomote to to OD master I was not able to create it with my admin account the only possibility was to enter the root login and password.
And here is the slapconfig.log.

2005-04-24 11:30:50 +0200 - slapconfig -setstandalone
2005-04-24 11:31:23 +0200 - slapconfig -createldapmaster
2005-04-24 11:31:23 +0200 - root is not a password server user
2005-04-24 11:31:27 +0200 - ldapadd command output:
ldapadd: update failed: cn=admin,cn=groups,dc=domain,dc=de
ldap_add: Type or value exists (20)
	additional info: uniqueMember: value #0 provided more than once
2005-04-24 11:31:27 +0200 - ldapadd command failed with status 20
2005-04-24 11:31:27 +0200 - ldapadd: update failed: cn=admin,cn=groups,dc=cellbio,dc=rwth-aachen,dc=de
ldap_add: Type or value exists (20)
	additional info: uniqueMember: value #0 provided more than once
2005-04-24 11:31:28 +0200 - Configuring Kerberos server, realm is MY-SERVER.DOMAIN.DE
2005-04-24 11:31:29 +0200 - kdcsetup command output:
Contacting the Directory Server
Authenticating to the Directory Server
Creating Kerberos directory
Creating KDC Config File
Creating Admin ACL File
Creating Kerberos Master Key
Creating Kerberos Database
Creating Kerberos Admin user
WARNING: no policy specified for root@MY-SERVER.DOMAIN.DE; defaulting to no policy
Adding kerberos auth authority to admin user
2005-04-24 11:31:29 +0200 - kdcsetup command failed with status 10
2005-04-24 11:31:29 +0200 - sso_util command output:
DoConfigure: argc = 13
Creating the service list
Creating the service principals
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
Creating the keytab file
Configuring services
WriteSetupFile: setup file path = /temp.TEXI/setup
Mail config file at /etc/MailServicesOther.plist updated successfully
Mail config file at /etc/MailServicesOther.plist updated successfully
Mail config file at /etc/MailServicesOther.plist updated successfully
AFP config file at /Library/Preferences/com.apple.AppleFileServer.plist updated successfully
Cleaning up 
2005-04-24 11:31:29 +0200 - kerberosautoconfig command output:
Couldn't find KerberosClient config record
Deleting the empty file
2005-04-24 11:31:29 +0200 - kerberosautoconfig command failed with status 2
2005-04-24 11:31:29 +0200 - slapconfig -setldapconfig
2005-04-24 13:46:14 +0200 - slapconfig -setldapconfig
2005-04-24 13:46:22 +0200 - slapconfig -setldapconfig
2005-04-24 13:46:50 +0200 - slapconfig -replicatenow
2005-04-24 16:52:52 +0200 - slapconfig -updateschema
2005-04-24 16:52:57 +0200 - Updating LDAPv3 plug-in configuration
2005-04-24 16:52:57 +0200 - Updating LDAP server indexes
2005-04-24 16:53:02 +0200 - Updating server mappings
2005-04-24 16:53:03 +0200 - ldapadd command output:
ldapadd: update failed: cn=neighborhoods,dc=domain,dc=de
ldap_add: Already exists (68)
2005-04-24 16:53:03 +0200 - ldapadd command failed with status 68
2005-04-25 18:02:27 +0200 - slapconfig -setldapconfig

– Is it normal to use the root user to promote a server to OD?

Thanks a lot…

[Anonymous]

Yes I used root for the admin user when creating the OD master. It was not working with the admin user. But the password for the root is the same as for the admin user. So it should have worked when I type in my admin user name.
I found that totally weird to type the admin user name and the root password? 😮
Thanks,
David

[sibr]

Have you sorted this problem as I’m have the same issues?!?!

[Author]

Posts