[16460] in Kerberos_V5_Development
Re: Unknown code adb 10 : cannot lock database error
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Wed Nov 10 01:56:42 2010
Mime-Version: 1.0 (Apple Message framework v1081)
From: Ken Raeburn <raeburn@mit.edu>
In-Reply-To: <A3E58C957C81584E933F5DA65FD96806E3091910@MBXA.exchange.cornell.edu>
Date: Wed, 10 Nov 2010 01:55:56 -0500
Message-Id: <0576DAA3-2B52-4C12-A2C9-8670C2712740@mit.edu>
To: Shivakeshav Santi <ss488@cornell.edu>
Cc: "krbdev@MIT.EDU" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Nov 9, 2010, at 14:12, Shivakeshav Santi wrote:
> We are seeing regular "Cannot lock database" errors on the KDC. The clients see "Unknown code adb 10" error.
>From a quick look at the sources, that can come up in a few cases. One of the database files may be locked already by another process; you can use lsof to see what other processes might have the files open. It may be trying to get an exclusive lock on a file it doesn't have write access to.
The attempts to lock the database files use non-blocking locking calls, and only make five attempts at one-second intervals before giving up. So if something else is keeping the database locked, either for more than five seconds, or for multiple briefer periods that happen to coincide with the attempts, that could be the problem. Do you know if anything else "interesting" is happening (KDB-related jobs running, or really intense load on the KDC or kadmin servers) at those times?
> We tried to retsrt the kadmin database and also run the following command but nothing seems to have helped.
>
> restorecon -R -v /var/kerberos/krb5kdc
'fraid I can't help with SELinux issues....
Ken
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
