Kerberos stopped running!

[Simple1]

OK I had restart my server due to my VPN stopping my server from responding (have been trying to fix this issue forever) upon restart Kerberos has stopped running, I got it back on thursday due to the well documented information on this site. Now I had a death in the family on friday and couldn’t come in to work, I was called while I was home and had to advise a collgue of mine to restart the server. I come in today and again kerberos is stopped upon trying to restart it I ge this message

[b]krb5kdc: Improper format of Kerberos configuration file while initializing krb5[/b]

after being a little confused about this, I go look for the krb5.conf file and guess what it’s not in /etc so now I’m not sure what to do at all. how do I properly configure a new krb5.conf file or Do I start a new install from scratch? or just demote to a standalone and then try to promote back to an OD Master? any help or suggestions are welcomed as not only did I have to restart my server (Intel xeon, 4GB, 2.0GHZ, 10.4.9) after VPN connection randomly causes it to freeze now I have to worry about kerberos going down everytime I do ahve to restart.

[jerkyjerk]

are you sure that an /etc/krb5.conf file is supposed to exist. I just looked at my odmaster and don’t see anything in /etc/ only krb5.keytab. The only other thing I could think of was /var/db/krb5kdc/kdc.conf. Traditionally in the other UNIX flavors I’ve dealt with krb5.conf is stored in /Library/Preferences/edu.mit.Kerberos in Mac OS.

[Simple1]

thanks, well i got Kerberos running but it’s weird everytime the VPN freezes and I do restart the server, LDAp comes back running but Kerberos doesn’t. I have to try and add a kerberos record and then when that fails, I initiate “sudo krb5kdc” in terminal and kerberos is back up and running. This is still not comfortable for me as I would like to not start Kerberos everything single time my server goes down. The more important thing would be finding out why the VPN keeps freezing the server in the 1st place.

[Simple1]

MacTroll, while what you state is possible isn’t it a little weird that it just started this last friday? I mean I’ve been running my own DNS for over a year now (when I took over the job) and was running a KDC the entire time and I’m sure I’ve restarted several times with the kdc running at startup. I’ve just trying to find out if there is something much bigger lurking around that’s all, not trying to discredit your point.

[Author]

Posts