[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: kadmin ktadd and F_WRLCK

Monika Strack wrote:

I have a big problem with kerberos5 ktadd. I create a new principal host/myhost.mydomain. This works ok. Then I want add it to the krb5.keytab, but ktadd hang. I have make a strace of kadmin and found that fcntl64(5, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0} is hanging.
Here the strace:
We have many hosts in keytab, so at the last Year it works. The last time, I have add a host to keytab are the Martch 23 2007.

How did you create the keytab? Using a newer version of kadmin or were you by any chance using the Heimdall kadmin (BSD)? The kadmin's are incompatible - just a thought. The strace doesn't mean much to me I'm afraid.

I had a similar problem on an old stable machine, here's a workaround which may help if kadmin's hanging


create the host key with host/host.domain
ktadd -k /etc/temp.keytab host/host.domain

# mv /etc/krb5.keytab /etc/old.keytab


rkt /etc/temp.keytab
rkt /etc/old.keytab
wkt /etc/krb5.keytab

# mv /etc/temp.keytab /etc/old.keytab /root (for safe keeping!)

Jamin @ Home @ Chester UK

Reply to: