[7631] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Error messages on krd5kdc and kadmind5

daemon@ATHENA.MIT.EDU (Wolfgang Rupprecht)
Fri Jul 12 15:01:59 1996

To: kerberos@MIT.EDU
Date: 12 Jul 1996 10:27:35 -0700
From: wolfgang@wsrcc.com (Wolfgang Rupprecht)

hhtham@bass.com.my (Tham Huei Hwan) writes:
>Any body know what is this messages mean when I try to execute krd5kdc on my newly setup machine.
>krb5kdc[344]: Address already in use while trying to bind secondary server socket

I just started getting this too.  krb5.6 ran fine for the first month
and then something changed...

Basically the bind of the socket to port 750 is failing in network.c .
Its not immidiately clear to me why the bind started failing, "netstat
-f inet" doesn't show anyone else using that port.  

After a lot of I just did the following as a cheap patch.  Its clearly
not right, but it will get you up and running again. (Assuming the
clients all try to connect to port 88 first.)

-wolfgang

Of course, I'm *hoping* that this isn't a breaking/trojan attack, and
that something else isn't giving out bad tickets on port 750...

diff -c network.c.~1~ network.c
*** network.c.~1~	Fri Feb 23 16:31:42 1996
--- network.c	Fri Jul 12 10:19:20 1996
***************
*** 123,133 ****
--- 123,135 ----
  	    return(retval);
  	}
  	sin.sin_port = htons(udp_port_nums[i]);
+ 	sin.sin_family = AF_INET;
  	if (bind(udp_port_fds[i], (struct sockaddr *) &sin,
  		 sizeof(sin)) == -1) {
  	    retval = errno;
  	    com_err(prog, 0, "Cannot bind server socket on port %d",
  		    udp_port_nums[i]);
+ 	    return 0;		/* XXX: fixme!!! -wsr */
  	    return(retval);
  	}
  	FD_SET(udp_port_fds[i], &select_fds);

---end---
-- 
Wolfgang Rupprecht    <wolfgang@wsrcc.com>     <http://www.wsrcc.com/> 

home help back first fref pref prev next nref lref last post