On 11.9.2014 14:20, Renier Gertzen wrote:
Hi,

My bind server refuses to start. I get the following:
Sep 11 14:14:40 orpst named-sdb[4343]: generating session key for dynamic DNS
Sep 11 14:14:40 orpst named-sdb[4343]: sizing zone task pool based on 6 zones
Sep 11 14:14:40 orpst named-sdb[4343]: set up managed keys zone for view 
_default, file 'dynamic/managed-keys.bind'
Sep 11 14:15:30 orpst named-sdb[4343]: Failed to retrieve default realm 
(Configuration file does not specify default realm)
Sep 11 14:15:30 orpst named-sdb[4343]: Failed to init credentials (Cryptosystem 
internal error)
Sep 11 14:15:30 orpst named-sdb[4343]: loading configuration: failure
Sep 11 14:15:30 orpst named-sdb[4343]: exiting (due to fatal error)

System is running Oracle Linux 6.5

The following is my config:
dynamic-db "ipa" {
         library "ldap.so";
         arg "uri ldapi://%2fvar%2frun%2fslapd-SUBDOM-EXAMPLE-COM.socket";
         arg "base cn=dns, dc=subdom,dc=example,dc=com";
         arg "fake_mname server.subdom.example.com.";
         arg "auth_method sasl";
         arg "sasl_mech GSSAPI";
         arg "sasl_user DNS/server.subdom.example....@server.subdom.com";
         arg "zone_refresh 0";
         arg "psearch yes";
         arg "serial_autoincrement yes";
};

Any assistance would be appreciated.


Hello!

Do you use IPA or not? Which version of IPA and bind-dyndb-ldap do you have?

AFAIK bind-dyndb-ldap was never tested with sdb version of named...

Anyway, I would try to look into /etc/krb5.conf and double check that is contains likes like these:

[libdefaults]
default_realm = IPA.EXAMPLE

Have a nice day!

--
Petr^2 Spacek

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Reply via email to