[33264] in Kerberos

home help back first fref pref prev next nref lref last post

Kadmind dies after startup on FC14 x64 arch

daemon@ATHENA.MIT.EDU (Maple Thorpe)
Sun Mar 13 13:15:51 2011

From: Maple Thorpe <maplethorpe@cox.net>
To: kerberos@mit.edu
Date: Sun, 13 Mar 2011 12:15:41 -0500
Message-ID: <1300036541.17257.57.camel@benu-cleo.blkdiamonds.lan>
Mime-Version: 1.0
Reply-To: maplethorpe@cox.net
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

I have been struggling with above prob for past two days.  To solve prob
after its appearance I have used kdb5_util destroy to remove databases,
uninstalled rpms, removed remaining KDC files
under /var/kerberos/krb5kdc/ folder and keytab file in /etc for clean
start.  

After each attempt to effect a clean start, i.e. installing rpms,
kdb5_util create -s, creating adm keytab, then starting krb5kdc and
kadmin services, kadmind dies.

Service kadmin is started as root user but kadmind dies
and /var/log/kadmin.log contains message "Permission denied while
mapping update log ('var/kerberos/krb5kdc/principal.ulog'). kdb5_util
creates principal.ulog and other db files in /var/kerberos/krb5kdc
folder with 600 permission with owner/group root.root.

Using strace against against rawhide kadmind is the only way it remains
alive.  Tail of strace contains:

stat("/var/kerberos/krb5kdc/principal.ulog", {st_mode=S_IFREG|0600,
st_size=4096040, ...}) = 0
open("/var/kerberos/krb5kdc/principal.ulog", O_RDWR) = 15
mmap(NULL, 268435456, PROT_READ|PROT_WRITE, MAP_SHARED, 15, 0) =
0x7f9cd8641000
fcntl(15, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0
msync(0x7f9cd8641000, 4096, MS_SYNC)    = 0
fcntl(15, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
fcntl(15, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0
lseek(15, 0, SEEK_END)                  = 4096040
fcntl(15, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
rt_sigaction(SIGINT, {0x7f9ceb28c210, [], SA_RESTORER, 0x7f9ce9468eb0},
NULL, 8) = 0
rt_sigaction(SIGTERM, {0x7f9ceb28c210, [], SA_RESTORER, 0x7f9ce9468eb0},
NULL, 8) = 0
rt_sigaction(SIGQUIT, {0x7f9ceb28c210, [], SA_RESTORER, 0x7f9ce9468eb0},
NULL, 8) = 0
rt_sigaction(SIGHUP, {0x7f9ceb28c160, [], SA_RESTORER, 0x7f9ce9468eb0},
NULL, 8) = 0
rt_sigaction(SIGPIPE, {0x7f9ceb28c1d0, [], SA_RESTORER, 0x7f9ce9468eb0},
NULL, 8) = 0
rt_sigaction(SIGCHLD, {SIG_IGN, [], SA_RESTORER, 0x7f9ce9468eb0}, NULL,
8) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543, ...}) = 0
write(3, "Mar 13 09:22:15 minniemouse.local"..., 73) = 73
sendto(4, "<30>Mar 13 09:22:15 kadmind[5813"..., 43, MSG_NOSIGNAL, NULL,
0) = 43

Nothing here tells me there is a permission error.  Is this a known
problem and where do I look to solve it?

Thanks

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post