I have a FreeIPA server set up on EL 6.4 with the following package versions:


When I try to start it the startup fails:

# ipactl start
Starting Directory Service
Starting dirsrv:
    EXAMPLE-COM...                                         [  OK  ]
    PKI-IPA...                                             [  OK  ]
Starting KDC Service
Starting Kerberos 5 KDC: krb5kdc: cannot initialize realm EXAMPLE.COM - see log file for details
Failed to start KDC Service
Shutting down
Stopping Kerberos 5 KDC:                                   [FAILED]
Stopping Kerberos 5 Admin Server:                          [FAILED]
Stopping httpd:                                            [FAILED]
Stopping pki-ca:                                           [  OK  ]
Shutting down dirsrv:
                                                           [  OK  ]
    PKI-IPA...                                             [  OK  ]
Aborting ipactl

So trying to start krb5kdc:

# service krb5kdc start
Starting Kerberos 5 KDC: krb5kdc: cannot initialize realm EXAMPLE.COM - see log file for details

Unfortunately there is nothing in /var/log/krb5kdc.log. Looking in /var/log/messages I see:

Oct 3 08:28:25 ipa0 krb5kdc[26676]: No such file or directory - while initializing database for realm EXAMPLE.COM

Unfortunately it doesn't tell us which file is missing. Strace helps here though:

# strace -f /usr/sbin/krb5kdc -r EXAMPLE.COM -P /var/run/krb5kdc.pid
open("/var/kerberos/krb5kdc/principal", O_RDONLY) = -1 ENOENT (No such file or directory)
gettimeofday({1380814261, 82991}, NULL) = 0
open("/etc/localtime", O_RDONLY)        = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=2819, ...}) = 0
fstat(4, {st_mode=S_IFREG|0644, st_size=2819, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f095f58d000 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 2819
lseek(4, -1802, SEEK_CUR)               = 1017
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\5\0\0\0\0"..., 4096) = 1802
close(4)                                = 0
munmap(0x7f095f58d000, 4096)            = 0
sendto(3, "<35>Oct 3 08:31:01 krb5kdc[2669"..., 115, MSG_NOSIGNAL, NULL, 0) = 115
munmap(0x7f0956c7e000, 2200608)         = 0
write(2, "krb5kdc: cannot initialize realm"..., 74krb5kdc: cannot initialize realm EXAMPLE.COM - see log file for details
) = 74
exit_group(1)                           = ?

Sure enough /var/kerberos/krb5kdc/principal doesn't exist. I have no idea why though and no backup to restore from, yet. Was still in the process of setting this machine up.

Is this a known issue?  Any theories on why it went missing?

And most importantly, any ideas on my recovery process here? Do I have to throw my KRB5 database away and start from scratch?


Freeipa-users mailing list

Reply via email to