Forum Replies Created
Viewing 1 post (of 1 total)
-
AuthorPosts
-
October 13, 2008 at 3:02 pm in reply to: Cannot bind clients to Open Directory with Kerberos-based security enabled #374443
natekruser
ParticipantAdditional information:
I have a web server running OS X 10.5 that I have configured under Server Admin as “Connected to a Directory System.” I added the OD Server to the web server using “Add a new Directory Server” within Directory Utility.
I then attempted to use the “Kerberize Services” option within Server Admin on the web server, and received an error message:
Unexpected error. An unexpected error of type 13 occurred.Also, on the web server I tried to get more information using ‘dig’:
$ dig myservername.myparentdomain.edu ; <<>> DiG 9.4.2-P2 <<>> myservername.myparentdomain.edu ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28686 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;myservername.myparentdomain.edu. IN A ;; ANSWER SECTION: myservername.myparentdomain.edu. 300 IN A myserverip ;; AUTHORITY SECTION: myparentdomain.edu. 300 IN NS parentdnsserver1.myparentdomain.edu. myparentdomain.edu. 300 IN NS parentdnsserver2.myparentdomain.edu. myparentdomain.edu. 300 IN NS parentdnsserver3.myparentdomain.edu. ;; ADDITIONAL SECTION: parentdnsserver1.myparentdomain.edu. 43200 IN A parentdnsserver1ip parentdnsserver2.myparentdomain.edu. 43200 IN A parentdnsserver2ip parentdnsserver3.myparentdomain.edu. 43200 IN A parentdnsserver3ip ;; Query time: 5 msec ;; SERVER: parentdnsserver1ip#53(parentdnsserver1ip) ;; WHEN: Mon Oct 13 09:28:55 2008 ;; MSG SIZE rcvd: 178On the OD server I used dscl for additional information:
$ dscl . -readall Config AppleMetaNodeLocation: /Local/Default RecordName: dhcp RecordType: dsRecTypeStandard:Config - AppleMetaNodeLocation: /Local/Default GeneratedUID: C56ACC6A-3019-48FF-825F-B2D3B2B613E8 RecordName: Kerberos:myservername.myparentdomain.edu RecordType: dsRecTypeStandard:Config XMLPlist: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>KADM_List</key> <array> <string>myservername.myparentdomain.edu</string> </array> <key>KDC_List</key> <array> <string>myservername.myparentdomain.edu</string> </array> </dict> </plist> - AppleMetaNodeLocation: /Local/Default KDCConfigData: [libdefaults] default_realm = LKDC:SHA1.A780EC3ABD99059A74AECBFAB50F81270B8F13F9 [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88 [realms] LKDC:SHA1.A780EC3ABD99059A74AECBFAB50F81270B8F13F9 = { kadmind_port = 749 max_life = 10h 0m 0s max_renewable_life = 7d 0h 0m 0s master_key_type = des3-hmac-sha1 supported_enctypes = des3-hmac-sha1:normal arcfour-hmac-md5:normal des-cbc-crc:normal des-cbc-crc:v4 acl_file = /var/db/krb5kdc/kadm5.acl admin_keytab = /var/db/krb5kdc/kadm5.keytab database_name = /var/db/krb5kdc/principal.LKDC:SHA1.A780EC3ABD99059A74AECBFAB50F81270B8F13F9 key_stash_file = /var/db/krb5kdc/.k5.LKDC:SHA1.A780EC3ABD99059A74AECBFAB50F81270B8F13F9 } [logging] kdc = FILE:/var/log/krb5kdc/kdc.log admin_server = FILE:/var/log/krb5kdc/kadmin.log RealName: LKDC:SHA1.A780EC3ABD99059A74AECBFAB50F81270B8F13F9 RecordName: KerberosKDC RecordType: dsRecTypeStandard:Config - dsAttrTypeNative:MaxIdleThreads: 4 dsAttrTypeNative:MaxThreads: 128 AppleMetaNodeLocation: /Local/Default RecordName: lookupd RecordType: dsRecTypeStandard:Config - AppleMetaNodeLocation: /Local/Default RecordName: NetBootServer RecordType: dsRecTypeStandard:Config - AppleMetaNodeLocation: /Local/Default PasswordServerLocation: myserverip RecordName: passwordserver RecordType: dsRecTypeStandard:Config - dsAttrTypeNative:apple-serviceinfo: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.macosxserver.host</key> <array> <string>myservername.myparentdomain.edu</string> </array> <key>com.apple.macosxserver.virtualhosts</key> <dict> <key>27FBC74D-36DA-47F5-BE9E-F7CADB437DF2</key> <dict> <key>hostDetails</key> <dict> <key>http</key> <dict> <key>enabled</key> <true/> <key>port</key> <integer>8008</integer> </dict> <key>https</key> <dict> <key>enabled</key> <false/> <key>port</key> <integer>0</integer> </dict> </dict> <key>hostname</key> <string>myservername.myparentdomain.edu</string> <key>serviceInfo</key> <dict> <key>calendar</key> <dict> <key>enabled</key> <false/> <key>templates</key> <dict> <key>calendarUserAddresses</key> <array> <string>%(principaluri)s</string> <string>mailto:%(email)s</string> <string>urn:uuid:%(guid)s</string> </array> <key>principalPath</key> <string>/principals/__uids__/%(guid)s/</string> </dict> </dict> </dict> <key>serviceType</key> <array> <string>calendar</string> </array> </dict> <key>DC49FF1B-2875-46C0-9A0F-7AE3F1DCCE76</key> <dict> <key>hostDescription</key> <string>Default web site of myservername.myparentdomain.edu</string> <key>hostDetails</key> <dict> <key>http</key> <dict> <key>enabled</key> <true/> <key>port</key> <integer>80</integer> </dict> <key>https</key> <dict> <key>enabled</key> <false/> </dict> </dict> <key>hostname</key> <string>*</string> <key>serviceInfo</key> <dict> <key>blog</key> <dict> <key>enabled</key> <false/> </dict> <key>webCalendar</key> <dict> <key>enabled</key> <false/> </dict> <key>webMailingListArchive</key> <dict> <key>enabled</key> <false/> </dict> <key>wiki</key> <dict> <key>enabled</key> <false/> </dict> </dict> <key>serviceType</key> <array> <string>webMailingListArchive</string> <string>webCalendar</string> <string>blog</string> <string>wiki</string> </array> </dict> </dict> <key>com.apple.macosxserver.webServiceModGUID</key> <string>20081001120045Z</string> </dict> </plist> dsAttrTypeNative:apple-serviceslocator: ::anyservice AppleMetaNodeLocation: /Local/Default GeneratedUID: 50317EA2-414E-4EFA-B4D7-D233A2CF019A RecordName: ServicesInformation RecordType: dsRecTypeStandard:Config - AppleMetaNodeLocation: /Local/Default RecordName: SharePoints RecordType: dsRecTypeStandard:Config - dsAttrTypeNative:code_page: 437 AppleMetaNodeLocation: /Local/Default RecordName: SMBServer RecordType: dsRecTypeStandard:Config -
AuthorPosts
Viewing 1 post (of 1 total)