[28416] in Kerberos
Re: Cannot lock database
daemon@ATHENA.MIT.EDU (Nalin Dahyabhai)
Mon Sep 17 16:22:20 2007
Date: Mon, 17 Sep 2007 16:21:55 -0400
From: Nalin Dahyabhai <nalin@redhat.com>
To: Nate Johnson <natejohn@iu.edu>
Message-ID: <20070917202155.GB17266@redhat.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <46EEA15C.2050403@iu.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Sep 17, 2007 at 11:46:36AM -0400, Nate Johnson wrote:
> This is from the master kdc's logs:
> Sep 17 15:11:20 <kdc> kadmind[5951]: Request: kadm5_randkey_principal,
> smtp/<fqdn>@IU.EDU, Cannot lock database, client=natejohn/admin@IU.EDU,
> service=kadmin/admin@IU.EDU, addr=<ip address>
Shot in the dark: is it RHEL 5.0 with SELinux in enforcing mode?
If it is, try running "restorecon -R -v /var/kerberos/krb5kdc". That'll
set the labels on the database files to values which the policy allows
kadmind to manipulate.
HTH,
Nalin
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
