[hjenkins]

Look out for any invisible files beginning with “.fstemp*” they cause all sorts of problems with PHD’s.

[hjenkins]

Make sure that Software Update service is running and then using WGM and selecting preferences a you either bind the machines to the Software Update server or by users by specifiying your server as suggested in the Software Update preference “http://server.yourserver.com:8088/”.

[hjenkins]

I had a similar problem when creating my master using Link Aggregation. Disabling the aggreation seemed to help me.

[hjenkins]

Feel like I’m getting closer:
I noticed the following on kdc logs on the master:

UNKNOWN_SERVER: authtime 1173084183, [email protected] for host/[email protected], Server not found in Kerberos database
Mar 05 10:35:32 server.domain.com krb5kdc[363](info): TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.1.31: UNKNOWN_SERVER: authtime 1173084183, [email protected] for host/[email protected], Server not found in Kerberos databaseSERVER.DOMAIN.COM

If I do a klist -k on the master I get:

Welcome to Darwin!
server:~ root# klist -k
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
—- ————————————————————————–
3 xgrid/[email protected]
3 xgrid/[email protected]
3 xgrid/[email protected]
3 vpn/[email protected]
3 vpn/[email protected]
3 vpn/[email protected]
3 ipp/[email protected]
3 ipp/[email protected]
3 ipp/[email protected]
3 XMPP/[email protected]
3 XMPP/[email protected]
3 XMPP/[email protected]
3 host/[email protected]
3 host/[email protected]
3 host/[email protected]
3 smtp/[email protected]
3 smtp/[email protected]
3 smtp/[email protected]
3 http/[email protected]
3 http/[email protected]
3 http/[email protected]
3 HTTP/[email protected]
3 HTTP/[email protected]
3 HTTP/[email protected]
3 pop/[email protected]
3 pop/[email protected]
3 pop/[email protected]
3 imap/[email protected]
3 imap/[email protected]
3 imap/[email protected]
3 ftp/[email protected]
3 ftp/[email protected]
3 ftp/[email protected]
3 afpserver/[email protected]
3 afpserver/[email protected]
3 afpserver/[email protected]
3 ldap/[email protected]
3 ldap/[email protected]
3 ldap/[email protected]

Should I see server2/[email protected] where server2.domain.com is my replica server?

[hjenkins]

Latest devlopments:
Notist that my kdc log files onk the replica in New York reads the following lines:

Mar 02 08:57:08 server2.domian.com krb5kdc[26010](info): setting up network…
krb5kdc: Address already in use – Cannot bind server socket to port 88 address fe80::20a:95ff:fe78:360e%en0
Mar 02 08:57:08 server2.domian.com krb5kdc[26010](info): set up 0 sockets
krb5kdc: no sockets set up?

I am unable to telnet or portscan to this port from the master or replica, even when using 127.0.0.1 from the master. Is this normal?

Could it perhaps be related to the Intrusion Prevention Servies (IPS) set on my router? I’ve turned this offf and I still can’t access port 88? Would I need to activate it somehow after turning off my IPS and then trying?

[Author]

Posts