<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-ZA" link="blue" vlink="purple"> <div class="WordSection1"> Issue resolved in the following manner<o:p></o:p> <o:p> </o:p> I saved copies of my named.conf.<o:p></o:p> ran yum remove bind<o:p></o:p> cd /var/named<o:p></o:p> rm -Rf * (be carefull)<o:p></o:p> ran yum install bind<o:p></o:p> copied my named.conf file back<o:p></o:p> service named start<o:p></o:p> <o:p> </o:p> And it started and works now.<o:p></o:p> <o:p></o:p> Thanks for the SDB tip.<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: freeipa-users-bounces@redhat.com [mailto:freeipa-users-bounces@redhat.com] On Behalf Of Renier Gertzen Sent: 12 September 2014 09:17 AM To: Petr Spacek; freeipa-users@redhat.com Subject: Re: [Freeipa-users] BIND not starting after IPA install<o:p></o:p> </div> </div> <o:p> </o:p> Yes, I use IPA. I have checked /etc/krb5.conf and it does contain: [libdefaults] default_realm = IPA.EXAMPLE Versions are as follows: Name : bind-dyndb-ldap Relocations: (not relocatable) Version : 2.3 Vendor: Oracle America Release : 5.el6 Build Date: Fri 22 Nov 2013 01:29:26 AM SAST Install Date: Tue 09 Sep 2014 11:13:21 AM SAST Build Host: ca-build44.us.oracle.com Name : ipa-server-selinux Relocations: (not relocatable) Version : 3.0.0 Vendor: Oracle America Release : 37.el6 Build Date: Fri 22 Nov 2013 01:25:33 AM SAST Install Date: Wed 10 Sep 2014 04:40:05 PM SAST Build Host: ca-build44.us.oracle.com -----Original Message----- From: <a href="mailto:freeipa-users-bounces@redhat.com">freeipa-users-bounces@redhat.com</a> [<a href="mailto:freeipa-users-bounces@redhat.com">mailto:freeipa-users-bounces@redhat.com</a>] On Behalf Of Petr Spacek Sent: 11 September 2014 07:08 PM To: <a href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a> Subject: Re: [Freeipa-users] BIND not starting after IPA install On 11.9.2014 14:20, Renier Gertzen wrote: > Hi, > > My bind server refuses to start. I get the following: > Sep 11 14:14:40 orpst named-sdb[4343]: generating session key for > dynamic DNS Sep 11 14:14:40 orpst named-sdb[4343]: sizing zone task > pool based on 6 zones Sep 11 14:14:40 orpst named-sdb[4343]: set up managed keys zone for view _default, file 'dynamic/managed-keys.bind' > Sep 11 14:15:30 orpst named-sdb[4343]: Failed to retrieve default > realm (Configuration file does not specify default realm) Sep 11 > 14:15:30 orpst named-sdb[4343]: Failed to init credentials > (Cryptosystem internal error) Sep 11 14:15:30 orpst named-sdb[4343]: > loading configuration: failure Sep 11 14:15:30 orpst named-sdb[4343]: > exiting (due to fatal error) > > System is running Oracle Linux 6.5 > > The following is my config: > dynamic-db "ipa" { > library "ldap.so"; > arg "uri ldapi://%2fvar%2frun%2fslapd-SUBDOM-EXAMPLE-COM.socket"; > arg "base cn=dns, dc=subdom,dc=example,dc=com"; > arg "fake_mname server.subdom.example.com."; > arg "auth_method sasl"; > arg "sasl_mech GSSAPI"; > arg "sasl_user <a href="mailto:DNS/server.subdom.example.com@SERVER.SUBDOM.COM"> DNS/server.subdom.example.com@SERVER.SUBDOM.COM</a>"; > arg "zone_refresh 0"; > arg "psearch yes"; > arg "serial_autoincrement yes"; }; > > Any assistance would be appreciated. Hello! Do you use IPA or not? Which version of IPA and bind-dyndb-ldap do you have? AFAIK bind-dyndb-ldap was never tested with sdb version of named... Anyway, I would try to look into /etc/krb5.conf and double check that is contains likes like these: [libdefaults] default_realm = IPA.EXAMPLE Have a nice day! -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project <o:p></o:p> Disclaimer <o:p></o:p> <a href="http://www.adcock.com/email-disclaimer.htm%20">http://www.adcock.com/email-disclaimer.htm</a> itevomcid <o:p></o:p> </div> </body> </html>