[Freeipa-users] BIND not starting after IPA install
Petr Spacek
pspacek at redhat.com
Thu Sep 11 17:08:11 UTC 2014
On 11.9.2014 14:20, Renier Gertzen wrote:
> Hi,
>
> My bind server refuses to start. I get the following:
> Sep 11 14:14:40 orpst named-sdb[4343]: generating session key for dynamic DNS
> Sep 11 14:14:40 orpst named-sdb[4343]: sizing zone task pool based on 6 zones
> Sep 11 14:14:40 orpst named-sdb[4343]: set up managed keys zone for view _default, file 'dynamic/managed-keys.bind'
> Sep 11 14:15:30 orpst named-sdb[4343]: Failed to retrieve default realm (Configuration file does not specify default realm)
> Sep 11 14:15:30 orpst named-sdb[4343]: Failed to init credentials (Cryptosystem internal error)
> Sep 11 14:15:30 orpst named-sdb[4343]: loading configuration: failure
> Sep 11 14:15:30 orpst named-sdb[4343]: exiting (due to fatal error)
>
> System is running Oracle Linux 6.5
>
> The following is my config:
> dynamic-db "ipa" {
> library "ldap.so";
> arg "uri ldapi://%2fvar%2frun%2fslapd-SUBDOM-EXAMPLE-COM.socket";
> arg "base cn=dns, dc=subdom,dc=example,dc=com";
> arg "fake_mname server.subdom.example.com.";
> arg "auth_method sasl";
> arg "sasl_mech GSSAPI";
> arg "sasl_user DNS/server.subdom.example.com at SERVER.SUBDOM.COM";
> arg "zone_refresh 0";
> arg "psearch yes";
> arg "serial_autoincrement yes";
> };
>
> Any assistance would be appreciated.
Hello!
Do you use IPA or not? Which version of IPA and bind-dyndb-ldap do you have?
AFAIK bind-dyndb-ldap was never tested with sdb version of named...
Anyway, I would try to look into /etc/krb5.conf and double check that is
contains likes like these:
[libdefaults]
default_realm = IPA.EXAMPLE
Have a nice day!
--
Petr^2 Spacek
More information about the Freeipa-users
mailing list