Comments on: Tiger to Leopard Server Migration, Part Four

By: Brent

Brent — Sat, 16 Aug 2008 14:39:58 +0000

Oh, and did you do:
chflags nouchg /Library/Preferences/edu.mit.Kerberos
as per step 2?

By: Brent

Brent — Sat, 16 Aug 2008 14:36:39 +0000

Ryan & Steven: can you connect to your directory service using ‘ldapsearch’ or other tools? Have you tried the kerberosautoconfig command from step 3? What do you see in the logs (/var/log/system.log, /var/log/slapd.log, /var/log/krb5kdc/kdc.log) when you’re getting segfaults and exit code 10?

Does the command:
serveradmin fullstatus dirserv
tell you anything useful about the state of Kerberos (kdc)?

By: Steven

Steven — Sat, 16 Aug 2008 12:39:41 +0000

Sorry, any help would be appreciated. It’s the only thing on my server than needs fixing.

By: Steven

Steven — Sat, 16 Aug 2008 12:38:55 +0000

I’m having exactly the same problem as Ryan - clean install of 10.5.4 and getting Segmentation faults as well as the exit code 10.

V, v frustrating.

By: Ryan

Ryan — Mon, 11 Aug 2008 15:38:39 +0000

Sorry, forgot to mention that the open directory master is a clean install of v10.5.4

By: Ryan

Ryan — Mon, 11 Aug 2008 15:37:19 +0000

I’m still getting Segmentation fault when trying to run step 4 ‘/usr/sbin/kdcsetup -f /LDAPv3/127.0.0.1 -w -a diradmin -p ***** -v 5 MYREALM.CA’

Even after removing Kerberos* like Benjamin suggested.

Also ’slapconfig -kerberize -f diradmin MYREALM.CA’ gives me an error:

kdcsetup command failed with exit code 10: stdout=(null), error-message=Contacting the Directory Server

Any advice?

By: damien

damien — Tue, 03 Jun 2008 13:18:59 +0000

Hello,
i’m sorry to disturb you again but our server as an other problem taht i don’t find docs or help on forums: cyrus seems to have a problem…all logs files in the mailing are good except the mail access that gives me :
extrait du journal des logs mail access:
Jun 3 13:35:03 artsway ctl_cyrusdb[3461]: DBERROR: couldn’t checkpoint: Operation not permitted
Jun 3 13:35:03 artsway ctl_cyrusdb[3461]: DBERROR: sync /var/imap/db: cyrusdb error
Jun 3 13:35:03 artsway ctl_cyrusdb[3461]: archiving log file: /var/imap/db/log.0000000001
Jun 3 13:35:03 artsway ctl_cyrusdb[3461]: done checkpointing cyrus databases
Jun 3 13:35:03 artsway master[161]: process 3461 exited, status 0
Jun 3 14:05:03 artsway master[3524]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: checkpointing cyrus databases
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: archiving database file: /var/imap/annotations.db
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR db4: /var/imap/deliver.db: unable to flush page: 0
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR db4: txn_checkpoint: failed to flush the buffer cache Operation not permitted
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR: couldn’t checkpoint: Operation not permitted
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR: sync /var/imap/db: cyrusdb error
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: archiving log file: /var/imap/db/log.0000000001
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: archiving database file: /var/imap/mailboxes.db
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR db4: /var/imap/deliver.db: unable to flush page: 0
Jun 3 14:05:03 artsway ctl_cyrusdb[3524]: DBERROR db4: txn_checkpoint: failed to flush the buffer cache Operation not permitted
”

D’apres ce que je comprends des erreurs qui sont repertoriées, c’est un probleme au niveau de cyrusdb… mais je ne comprends pas ou se situe le probleme: ce fichier etait utilise sur l’ancien serveur et fonctionne dessus, mais ne fonctionne pas sur le nouveau… quelqu’un peut m’aider? (je debute en mac )

By: Sean

Sean — Fri, 30 May 2008 17:23:19 +0000

I keep getting segmentation faults as well when running kdcsetup. Using the dscl utility I see that there are no Kerberos records to remove. Wondering if there is something else I’m missing?

By: Mano

Mano — Thu, 22 May 2008 22:55:39 +0000

Brent,
I am a power user who just switched to Leopard Server. I set it up at home and have had various issues with it. I was fairly certain I had Kerberos set up right but I couldn’t connect to AFP at all. (Though at one point it was working ?!?) Your tip made it work right for me. Thanks for taking the time to write that down.

Mano

By: Benjamin

Benjamin — Fri, 29 Feb 2008 14:35:08 +0000

It seems that this command:

slapconfig -kerberize -f diradmin MYREALM.CA

Actually performs the commands in step 2, 3 and the first command in step 6. It does a lot more also, including setting authAuthority records.

I had a similar problem, that actually revolved around my /Local/Default directory and my LDAP directory containing stale Kerberos records. The records can be removed with the dscl utility:

cd /Local/Default rm Kerberos* cd /LDAPv3/127.0.0.1/Config rm Kerberos*

After doing this the slapconfig command worked just fine. Before removing the records the kdcsetup command failed with a segmentation fault…