[Freeipa-devel] GSSAPI/krb5 troubles after dirsrv restart

[Simo Sorce]

On Thu, 2008-10-09 at 18:31 +0200, Thomas Sailer wrote:
> On Thu, 2008-10-09 at 10:21 -0400, Rob Crittenden wrote:
> 
> Ok, kernel-2.6.26.5-28.fc8 seems to be broken wrt. ptrace, rebooted with
> kernel-2.6.25.14-69.fc8, now strace works.
> 
> 3252  access("/etc/sysconfig/init", X_OK) = -1 EACCES (Permission denied)
> 3252  access("/etc/sysconfig/network", X_OK) = -1 EACCES (Permission denied)
> 3269  access("/etc/krb5.conf", W_OK)    = -1 EACCES (Permission denied)
> 3291  access("/etc/krb5.conf", W_OK)    = -1 EACCES (Permission denied)
> 3291  access("/etc/krb5.conf", W_OK)    = -1 EACCES (Permission denied)
> 3291  open("/etc/krb5.keytab", O_RDONLY|O_LARGEFILE) = -1 EACCES (Permission denied)
> 3291  access("/etc/krb5.conf", W_OK)    = -1 EACCES (Permission denied)
> 
> Now I don't know why it tries to read /etc/krb5.keytab, and
> not /etc/dirsrv/ds.keytab ?

Check /etc/sysconfig/dirsrv it should contain a line that tells DS where
to find the right keytab.
If that is missing we need to find out why.

Simo.