Comments on: Kerberos Issues With Podcast Producer / XGrid on Leopard Server

By: Brent

Brent — Fri, 22 Aug 2008 22:26:54 +0000

John: I bet that the problem was that your admin user didn’t have a mailbox:

http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/SieveShell

I just came across this while setting up a new mail admin user.

By: Brent

Brent — Fri, 08 Aug 2008 18:34:03 +0000

Looks like you have a general problem with Kerberos - do any kerberized services work? Probably not…

I don’t have time to research the issue, but starting with Google would be good. The first match indicates an issue with kdc.conf and the database name…

By: GEORGE

GEORGE — Fri, 08 Aug 2008 07:08:10 +0000

thank you for the answer, the thing is that I am still not able to start xgrid with kerberos authentication.

Here is the error from kadmin.local any other ideas would be really appreciated:

$ sudo kadmin.local
Password:
Authenticating as principal root/admin@SERVERNAME.DOMAIN.RO with password.
kadmin.local: No such file or directory while initializing kadmin.local interface

By: Brent

Brent — Thu, 07 Aug 2008 16:31:07 +0000

George, it must be executed with root privileges. Prefix with “sudo”.

By: GEORGE

GEORGE — Thu, 07 Aug 2008 12:09:18 +0000

hello

Interesting postings

I have the folowing:

$ sudo klist -k | grep xgrid
4 xgrid/servername.domain.ro@SERVERNAME.DOMAIN.RO
4 xgrid/servername.domain.ro@SERVERNAME.DOMAIN.RO
4 xgrid/servername.domain.ro@SERVERNAME.DOMAIN.RO
3 xgrid@SERVERNAME.DOMAIN.RO
3 xgrid@SERVERNAME.DOMAIN.RO
3 xgrid@SERVERNAME.DOMAIN.RO

2. $ kadmin.local
Couldn’t open log file /var/log/krb5kdc/kadmin.log: Permission denied
Authenticating as principal adminuser/admin@SERVERNAME.DOMAIN.RO with password.
kadmin.local: Permission denied while initializing kadmin.local interface

By: Brent

Brent — Fri, 04 Apr 2008 07:07:43 +0000

Also, try running:

sudo serveradmin settings xgrid

If the FQDN of your kerberos server isn’t in the prefs:ControllerName field, you can set it with:

sudo serveradmin settings xgrid:AgentSettings:prefs:ControllerName = “myserver.netmojo.ca”

Yet another place to look for problems is in the plaintext xml file:

/Library/Preferences/com.apple.pcastserverd.plist

I’m interested to know how it goes. Good luck!

By: Brent

Brent — Thu, 03 Apr 2008 21:30:32 +0000

Did you have to change the /private/etc/xgrid/controller/service-principal file? If so, did you restart Xgrid and the KDC after changing it? Is your actual FQDN equal to the name in that file, and does DNS resolve your IP address (forward and reverse lookups) to that name?

By: Jussi

Jussi — Thu, 03 Apr 2008 07:15:50 +0000

Hi,

for me this did not solve the problem with “agent could not determine the expected controller service principal”. My xgrid service principal and the one expected are the one and the same. Any ideas?

/jussi