[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Heimdal kerberos issue after openldap upgrade



On Fri, 2005-10-07 at 12:03 -0500, Robert Larson wrote:
> Hello!
> 
> I'm running a gentoo authentication server utilizing heimdal-kerberos, 
> cyrus-sasl, and openldap.  This setup has been running for roughly six months 
> without problems, until an openldap upgrade rendered my kerberos 
> implementation useless.

> I can execute searches and adds, but for some reason this upgrade has caused 
> kerberos to begin having problems.  When I try kinit, I receive this in 
> syslog:
> [kdc] UNKNOWN -- user@MYREALM: Wrong database version
> 
> I try the following:
> # kadmin -l
> kadmin> list *
> kadmin: opening database: ldap_sasl_bind_s: Can't contact LDAP server
> kadmin: kadm5_get_principals: Wrong database version
> kadmin>

This looks like the ldapi socket isn't in place.  Is 'ldapi://' on the
command line of sldapd?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net

This is a digitally signed message part