Platform "Linux x86_64 x86_64 x86_64 GNU/Linux" Been running for many years without a hitch until this am when we noticed the following in the logs because kadmind displaying errors shown below and was basically brain dead.
Restart of krb5kdc and kadmind seemed to fix it for now! Not sure what could have cause this, as I have never seen this happen in all of the 11 years since Kerberos v4! As I was typing this message, it started happening again, and I alerted my colleague who responded that his program may be the cause of this problem. He is running a script that is checking status of 100K alumni to see who has an kerberos principal or not. Thats all! We are wondering if running this by hand vs. from cron could be loading the LD_LIBRARY_PATH! (edit: yes paths were different, we changed it to correct load library path) But still is this a known bug and hopefully been fixed in the latest version or just normal behavior? Kind of scary that this can happen in the first place if you have the wrong load lib path. I thought I would share this with the list hoping someone could shed some light for us. Thank you in advance for any help you may provide, Tareq ---- Oct 14 09:52:11 kdcservername.fqdn.edu kadmind[19076](Notice): Miscellaneous RPC error: XXX.XX.XXX.XX, internal error unsealing sequence number ....a few thousands of identical lines in the logs and then: Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Authentication attempt failed: XXX.XX.XXX.XX, GSS-API error strings are: Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Authentication attempt failed: XXX.XX.XXX.XX, GSS-API error strings are: Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Unspecified GSS failure. Minor code may provide more information Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Unspecified GSS failure. Minor code may provide more information Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Database is locked or in use--try again later Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): Database is locked or in use--try again later Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): GSS- API error strings complete. Oct 14 14:00:28 kdcservername.fqdn.edu kadmind[18419](Notice): GSS- API error strings complete. (IP address removed was for an application server where our user management perl tools are running.) ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
